Mein Kollege Feliciano Intini arbeitet als Chief Security Advisor für Microsoft Italien. Er hat auf seinem Blog ein ganz besonderes Posting, welches er regelmäßig aktualisiert. Darin stellt er eine Linkliste der von Microsoft im Web zur Verfügung gestellten Ressourcen zum Thema Security Mühe zusammen. Anbei die aktuelle Liste:

Microsoft Security Experts Blogs

• Aaron Margosis
• Cyril Voisin [UPD-08-04]
• David LeBlanc [UPD-08-04]
• Eric Fitzgerald
• Jeff Jones
• Kai Axford
• Kim Cameron
• Kimmo Bergius [UPD-08-04]
• Mark Russinovich
• Michael Howard
  • (BK) Writing Secure Code 2nd Ed
  • (BK) 19 Deadly Sins of Software Security
  • (BK) The Security Development Lifecycle
  • (BK) Writing Secure Code for Windows Vista
• Robert Hensing
• Roger Halbheer [UPD-08-04]
• Steve Lamb
• Steve Riley
• Urs P. Küderli [UPD-08-04]
• Vittorio Bertocci
  • (BK) Understanding Windows CardSpace [UPD-08-03]
  • Vladimir Mamykin [UPD-08-04]

1. Microsoft Strategy & Initiatives
   1. Security & Privacy
      1. Trustworthy Computing (TwC)
         (W3) Trustworthy Computing homepage [UPD-08-04]
         1. End to End Trust
            (W3) End to End Trust homepage [UPD-08-04]
      2. Interoperability
         (W3) Interoperability homepage [UPD-08-04]
         1. Interoperability Principles
            (W3) Interoperability Principles homepage [UPD-08-04]
2. Internet Security
   1. Identity Metasystem & Windows CardSpace
      (SB) Kim Cameron’s Identity Blog [UPD-08-03]
      (SB) Vittorio Bertocci’s Vibro.NET blog [UPD-08-03]
      (SB) CardSpace: Behind The Code [UPD-08-03]
      (W3) Windows CardSpace MSDN Resources [UPD-08-03]
      (W3) Windows CardSpace on Microsoft .NET Framework 3.0 Community [UPD-08-03]
      (BK) Understanding Windows CardSpace [UPD-08-03]
   2. Online Services Security
      (W3) Microsoft Online Services TechCenter [UPD-08-04]
      (WP) Security Features in Microsoft Online [UPD-08-04]
      1. Windows Live Security
         (B) Windows Live ID Team Blog
3. Perimeter & Network Security
   1. Forefront Edge Security (Internet Access Protection & Secure Remote Access)
      (W3) Forefront Edge Security homepage [UPD-08-04]
      1. Internet Security & Acceleration (ISA) Server
         (W3) ISA Server homepage [UPD-08-04]
         1. Previous versions: ISA 2000, ISA 2004
            (SB) ISA Server Product Team Blog
         2. Internet Security & Acceleration (ISA) Server 2006
            (SB) ISA Server Product Team Blog
            (W3) ISA Server TechCenter [UPD-08-01]
         3. Forefront Threat Management Gateway (TMG)
            (SB) Forefront Stirling Blog [UPD-08-04]
            (W3) Forefront "Stirling" TechCenter [UPD-08-04]
      2. Internet Application Gateway (IAG)
         (W3) IAG homepage [UPD-08-04]
         1. Internet Application Gateway (IAG) 2007
            (W3) IAG 2007 TechCenter [UPD-08-01]
         2. Forefront Unified Access Gateway (UAG)
            (SB) Forefront Stirling Blog [UPD-08-04]
            (W3) Forefront "Stirling" TechCenter [UPD-08-04]
   2. Network Access Protection (NAP) Solution
      (SB) Network Access Protection Blog
      (W3) NAP TechCenter
      (BK) Windows Server® 2008 Networking and Network Access Protection (NAP)
   3. Remote Access, VPN & Quarantine Services
      (SB) Routing and Remote Access Blog
      (SB) ISA Server Product Team Blog
      (W3) Routing and Remote Access TechCenter
      (W3) VPN TechCenter [UPD-08-04]
      1. ISA 2006 VPN/QS
         (W3) VPN Concepts in ISA Server 2006 [UPD-08-04]
      2. Win2003 RAS/IAS/QS
         (W3) IAS TechCenter [UPD-08-04]
         (W3) Win2003 Remote Access Quarantine homepage [UPD-08-04]
      3. Win2008 NPS
         (W3) Win2008 NPS TechCenter [UPD-08-04]
   4. Wireless Security
      (B) Windows Core Networking Blog
      (W3) Wireless Networking TechCenter [UPD-08-04]
      (W3) Wireless and Mobile Security: Technical Resources [UPD-08-04]
   5. IPSEC, “Server & Domain Isolation” Solution
      (B) Windows Core Networking Blog
      (W3) IPSEC TechCenter [UPD-08-04]
      (W3) Server & Domain Isolation TechCenter [UPD-08-04]
   6. Windows Firewall
      (W3) Windows Firewall TechCenter [UPD-08-04]
4. Operating System Security
   1. Client Operating System Security
      (SB) Security Tips & Talk Blog [UPD-08-03]
      1. Windows 2000 client security
         (WP) Windows 2000 Hardening Guide [UPD-08-02]
      2. Windows XP security
         (WP) Windows XP Security Guide [UPD-08-02]
      3. Windows Vista security
         (SB) Windows Vista Security Blog
         (W3) Windows Vista Security TechCenter [UPD-08-04]
         (WP) Windows Vista Security Guide [UPD-08-02]
         (SB) Windows Genuine Advantage Blog
         (W3) Genuine Microsoft Software
         (WP) IDC Study: The risks of obtaining and using pirated software
   2. Server Operating System Security
      (B) Windows Server Team Blog
      1. Windows 2000 Server security
         (W3) Windows Server 2000 Security TechCenter [UPD-08-04]
         (WP) Securing Windows 2000 Server [UPD-08-02]
      2. Windows Server 2003 security
         (W3) Windows Server 2003 Security TechCenter [UPD-08-04]
         (WP) Windows Server 2003 Security Guide [UPD-08-02]
      3. Windows Server 2008 security
         (W3) Win2008 Security & Protection TechCenter [UPD-08-04]
         (WP) Windows Server 2008 Security Guide [UPD-08-04]
         (BK) Windows Server® 2008 Networking and Network Access Protection (NAP)
         (BK) Windows Server® 2008 PKI and Certificate Security
   3. Windows Mobile Security
      (B) Windows Mobile Team Blog
      (W3) Device Management & Data Security
      (W3) Wireless and Mobile Security: Technical Resources [UPD-08-04]
   4. Server & Desktop Virtualization Security
      (B) Windows Virtualization Team Blog [UPD-08-04]
      (W3) Virtualization TechCenter [UPD-08-04]
   5. Anti-Malware Solutions (for systems)
      (SB) Anti-Malware Engineering Team
      1. Windows Defender
         (W3) Windows Defender homepage [UPD-08-04]
         (W3) Windows Defender TechCenter [UPD-08-04]
      2. Forefront Client Security
         (SB) Microsoft Forefront Client Security Team Blog
         (W3) Forefront Client Security TechCenter [UPD-08-01]
         1. Forefront “Stirling”
            (SB) Forefront Stirling Blog [UPD-08-04]
            (W3) Forefront "Stirling" TechCenter [UPD-08-04]
      3. Windows Live OneCare
         (W3) Windows Live OneCare homepage [UPD-08-04]
         (SB) Windows Live OneCare Team Blog
         (SB) Windows Live Safety Center Team Blog
         (SB) Windows Live OneCare Family Safety Blog
5. Application Security
1. Application & Platform Core Security
   (SB) The Security Development Lifecycle Blog
   (SB) Microsoft Application Threat Modeling Blog
   (SB) ACE Team (Security, Performance, and Privacy) Blog
   (SB) "%41%43%45%20%54%65%61%6d" Blog
2. Client Applications Security
   1. Office Security
      (W3) Office Security TechCenter [UPD-08-04]
      (B) Microsoft Office Team Blogs
      1. Previous versions: Office 2000, Office XP
         (WP) Office 2003 Security Whitepaper [UPD-08-04]
      2. Office 2007 Security
         (WP) 2007 Microsoft Office Security Guide [UPD-08-02]
   2. Internet Explorer Security
      (W3) Internet Explorer TechCenter [UPD-08-04]
      (B) Internet Explorer Team Blog
      1. Previous versions: IE 6.0
         (WP) Understanding Security in IE 6 in Windows XP SP2 [UPD-08-04]
      2. IE 7.0 Security
         (WP) IE 7 Desktop Security Guide [UPD-08-04]
      3. IE 8.0 Security
         (W3) Internet Explorer 8 beta 1 homepage [UPD-08-04]
   3. Instant Messaging Security
      (WP) Security Considerations for Instant Messaging in the Workplace [UPD-08-04]
      1. Windows Live Messenger Security
         (B) Windows Live Messenger Team Blog
      2. Office Communicator 2007 Security
         (B) Microsoft Office Communicator Team Blog
3. Server Applications Security
1. Exchange Security
   (W3) Exchange Server TechCenter [UPD-08-04]
   (B) Microsoft Exchange Team Blog
1. Previous versions: Exchange 2000, Exchange 2003 Security
   (W3) Exchange Server 2003 Security TechCenter [UPD-08-04]
2. Exchange 2007 Security
   (W3) Exchange Server 2007 Security TechCenter [UPD-08-04]
2. SQL Security
   (W3) SQL Server TechCenter [UPD-08-04]
   (W3) SQL Server Security TechCenter [UPD-08-04]
   (B) Microsoft SQL Server Support Blog
1. Previous versions: SQL 2000 Security
   (W3) Checklist: Securing SQL Server 2000 [UPD-08-04
2. Previous versions: SQL 2000 Security
   (W3) SQL Server 2005 Security TechCenter [UPD-08-04]
3. SQL 2008 Security
   (W3) SQL Server 2008 Security homepage [UPD-08-04]
   (WP) SQL Server 2008 Security overview for DB administrators [UPD-08-04]
3. IIS Security
   (B) IIS.net Blogs
1. Previous versions: IIS 5.0 Security
   (W3) IIS Security Guidance [UPD-08-04]
2. Previous versions: IIS 6.0 Security
   (W3) Security in IIS 6.0 [UPD-08-04]
   (W3) Securing Web Sites and Applications [UPD-08-04]
3. IIS 7.0 Security
   (W3) IIS 7.0: Configure Web Server Security [UPD-08-04]
4. Sharepoint Security
   (B) Microsoft Office SharePoint Server Team Blog
   (W3) MOSS TechCenter [UPD-08-04]
1. Microsoft Office Sharepoint Server (MOSS) 2007
   (W3) MOSS Security TechCenter [UPD-08-04]
5. Unified Communications Solutions
   (W3) Unified Communications homepage [UPD-08-04]
1. Office Communications Server (OCS) 2007 Security
   (B) Microsoft Office Communications Server Team Blog
   (W3) OCS TechCenter [UPD-08-04]
6. Application Virtualization Security
   (W3) Application Virtualization TechCenter [UPD-08-04]
4. Anti-Malware Solutions (for Server applications)
   (SB) Anti-Malware Engineering Team
1. Forefront Server Security
   (SB) Microsoft Forefront Server Security Blog
   (W3) Forefront Server Security TechCenter [UPD-08-04]
1. Microsoft Antigen
   (W3) Antigen TechCenter [UPD-08-01]
2. Forefront Security for Exchange (Exchange 2007)
   (W3) Forefront Security for Exchange TechCenter [UPD-08-01]
3. Forefront Security for Office Communications Server
   (W3) Forefront Security for OCS TechCenter [UPD-08-04]
4. Forefront Security for Sharepoint (Office SharePoint Server 2007 and Microsoft Windows SharePoint Services 3.0)
   (W3) Forefront Security for Sharepoint TechCenter [UPD-08-01]
5. Forefront “Stirling”
   (SB) Forefront Stirling Blog [UPD-08-04]
   (W3) Forefront "Stirling" TechCenter [UPD-08-04]
6. User Security
1. Identity & Access Solutions
   (W3) Microsoft Identity & Access Solutions homepage [UPD-08-04]
1. Directory Services Security
   (W3) Active Directory Domain Services (AD DS) in Win2008 TechCenter [UPD-08-04]
   (W3) Active Directory Lightweight Directory Services (AD LDS) in Win2008 TechCenter [UPD-08-04]
   (W3) Group Policy TechCenter [UPD-08-04]
   (B) Ask the Directory Services Team blog [UPD-08-04]
   (B) Tim Springston’s Active Directory blog [UPD-08-03]
2. Identity Lifecycle Manager (ILM) 2007
   (W3) ILM 2007 TechCenter [UPD-08-04]
3. Active Directory Federation Services (AD FS)
   (W3) Active Directory Federation Services (AD FS) in Win2008 TechCenter [UPD-08-04]
4. Certificate Services and SmartCard
   (W3) Active Directory Certification Services (AD CS) in Win2008 TechCenter [UPD-08-04]
   (SB) Windows PKI blog
   (SB) SmartCard Infrastructure Blog
   (BK) Windows Server® 2008 PKI and Certificate Security
7. Data Security
1. Data Encryption solutions
   (WP) The Data Encryption toolkit for Mobile PCs [UPD-08-04]
1. Encrypting File System (EFS)
   (W3) The Encrypted File System [UPD-08-04]
1. Previous versions: EFS in Win2000, WinXP, Win2003
   (W3) EFS in WinXP and Win2003 [UPD-08-04]
2. EFS in Windows Vista & Windows Server 2008
   (W3) EFS in Win2008 [UPD-08-04]
2. BitLocker
   (W3) BitLocker TechCenter [UPD-08-04]
2. Policy Enforcement solutions
1. Rights Management Server (RMS)
   (SB) RMS: Protecting Your Assets.
1. RMS in Windows Server 2003
   (W3) RMS in Win2003 TechCenter [UPD-08-04]
2. RMS in Windows Server 2008
   (W3) RMS in Win2008 TechCenter [UPD-08-04]
3. Privacy Enhancing Technologies (PET)
   (SB) The Data Privacy Imperative
1. Privacy Enhancements in Windows XP SP2
   (WP) Controlling Internet Communications in WinXP SP2 [UPD-08-04]
2. Privacy Enhancements in Windows Vista
   (WP) Windows Vista Privacy Statement [UPD-08-04]
   (WP) Controlling Internet Communications in Windows Vista [UPD-08-04]
8. Security Foundations – Technology
1. Security Update & Compliance Management solutions
   (SB) Microsoft Security Response Center
   (SB) Security Vulnerability Research & Defense
   (W3) Update Management TechCenter [UPD-08-04]
   (SB) Solution Accelerators - Security & Compliance
1. Windows Update, Microsoft Update & Automatic Update Agent
   (B) Microsoft Update Team Blog
2. WSUS
   (B) WSUS Product Team Blog
   (B) WSUS Support Team Blog [UPD-08-04]
   (W3) WSUS TechCenter [UPD-08-04]
3. SMS & System Center Configuration Manager
   (B) SMS & MOM Product Team Blog [UPD-08-04]
1. SMS 2003
   (W3) System Management Server 2003 TechCenter [UPD-08-04]
2. System Center Configuration Manager 2007
   (W3) System Center Configuration Manager 2007 TechCenter [UPD-08-04]
4. Microsoft Baseline Security Analyzer
   (W3) MBSA homepage [UPD-08-04]
   (W3) MBSA 2.1 homepage [UPD-08-04]
2. Security Monitoring & Auditing Solutions
1. System Center Operations Manager 2007
   (B) Operations Manager Product Team Blog
   (W3) System Center Operations Manager TechCenter [UPD-08-04]
3. Systems Management Solutions
1. System Center
   (W3) System Center homepage [UPD-08-04]
   (B) Nexus SC: The System Center Team Blog [UPD-08-04]
   (W3) System Center TechCenter [UPD-08-04]
4. Hardware & Physical Security
1. Physical Security
   (WP) Physical Security at Microsoft [UPD-08-04]
2. Trusted Platform Module (TPM)
   See Bitlocker topic.
9. Security Foundation – Processes
   (B) MOF and Service Management at Microsoft
1. Organizational Security & Policies
2. Operational Security & Procedures

Legende: (B)=Blog, (SB)=Security Blog, (W3)=Web Page, (WP)=White Paper, (BK)=Security Book