News

 

Building Security into Windows Vista and the Microsoft Culture http://go.microsoft.com/?linkid=8691652

By Michael Howard, Principal Security Program Manager, Microsoft Corporation At the end of the day, you improve security by focusing on security. Explore how -- and, more importantly, why -- the Security Development Lifecycle (SDL) has resulted in a reduction in vulnerabilities across major Microsoft products, including Windows Vista.

 

Security Tip of the Month: Laying the Foundation for the Microsoft Security Development Lifecycle: Implementing the Principles http://go.microsoft.com/?linkid=8691659

By Jeremy Dallman, Security Program Manager, Microsoft Security Engineering & Communications Learn how to establish a baseline architectural understanding of your application security, one that identifies critical weaknesses and provides enough evidence to support the decision to move forward with a full SDL adoption.

 

Microsoft Security Development Lifecycle (SDL) - Detailed Process Guidance Now Available! http://go.microsoft.com/?linkid=8691654

As part of its commitment to a more secure and trustworthy computing ecosystem, Microsoft is making the details of the SDL process generally available online for the first time. IT policy makers and software development organizations can leverage this content to enhance and inform their own software security and privacy assurance programs.

 

News from RSA: Microsoft's Vision for a More Trusted Internet http://go.microsoft.com/?linkid=8691655

Read Microsoft's End to End Trust whitepaper and join an online discussion forum about building a more secure and privacy enhanced Internet.

 

Try System Center Mobile Device Manager Today http://go.microsoft.com/?linkid=8691656

See firsthand how Microsoft System Center Mobile Device Manager with Windows Mobile 6.1 can help improve mobile device security, simplify management, and lower costs. Download the 120-day Trial Evaluation software.

 

Forefront Codename "Stirling" Beta Now Available for Download http://go.microsoft.com/?linkid=8691657

Microsoft Forefront codename "Stirling" is an integrated security system that delivers comprehensive, coordinated protection across endpoints, server applications, and the network edge. It provides simplified management and critical visibility that make security easier to manage and control. Register today and you'll automatically receive access to valuable beta resources throughout the evaluation experience.

 

Evaluate Microsoft Security Products and You Could Win a Windows Home Server http://go.microsoft.com/?linkid=8691658

Download a free trial or take a virtual lab of Forefront Client Security, Forefront Security for Exchange Server or Forefront Security for SharePoint and be entered for a chance to win great prizes. Find out more at Evalu'08 http://go.microsoft.com/?linkid=8562915

 

Microsoft Security Bulletin Summary for April, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-apr.mspx 

 

Search for previous security bulletins http://go.microsoft.com/?linkid=3992478 

 

Security Bulletin Feed http://go.microsoft.com/?linkid=3992479  RSS http://go.microsoft.com/?linkid=3992480

 

Documents

 

Improve Security through Meaningful Security Policies http://go.microsoft.com/?linkid=8775500

This article discusses how policies are designed to control human risk factors, the reasons why policies sometimes fail, and best practices for effective security policies.

 

The Security Risk Management Guide http://go.microsoft.com/?linkid=8775501

This guide helps you plan, build and maintain a successful security risk management programme. In a four phase technology-agnostic process, the guide explains how to build an ongoing process to measure and drive security risks to an acceptable level.

 

Lessons Learned from Five Years of Building More Secure Software http://go.microsoft.com/?linkid=8691660

Learn about prioritizing code by age, using analysis tools and automation, looking at threats from multiple angles, and the importance of education.

 

Eight Simple Rules for Developing More-Secure Code http://go.microsoft.com/?linkid=8691661

This article presents that list of habits shared by developers of secure code. From taking responsibility to using the best tools available, these habits can help make you a more secure developer.

 

Protecting Your Code with Visual C++ Defenses http://go.microsoft.com/?linkid=8691662

Read about some of the buffer overrun defenses available in Visual C++ 2005 and beyond.

 

Discover HelloSecureWorld http://go.microsoft.com/?linkid=8691663

HelloSecureWorld.com provides a powerful experience for promoting security awareness and education in the developer community by surfacing existing content as well as new.

 

Downloads

 

Security White Papers

Security white papers that address the specific security needs of particular industries, such as the professional services and financial services industries.

http://www.microsoft.com/downloads/details.aspx?FamilyID=4cd29b01-eed8-45f5-ab1e-ff1e1aef7b22&DisplayLang=en

 

Microsoft Forefront Client Security BPA

Best Practices Analyzer for FCS v1.0

http://www.microsoft.com/downloads/details.aspx?FamilyID=0cefac3f-91ed-40c3-a684-603f149a4e32&DisplayLang=en

 

Security Features in Microsoft Online

This white paper describes how the Microsoft concern for security, as defined in the Trustworthy Computing initiative, has driven key features in the design, deployment, and operation of the Microsoft Online Services environment.

http://www.microsoft.com/downloads/details.aspx?FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413&DisplayLang=en

 

Ensuring Security Baseline Compliance using DCM

The Security Compliance Management Beta provides authoritative, supportable tools and prescriptive guidance to help organizations conduct and validate security compliance checks against established baselines from Microsoft.

http://www.microsoft.com/downloads/details.aspx?FamilyID=5534bee1-3cad-4bf0-b92b-a8e545573a3e&DisplayLang=en

 

Starter Group Policy Objects (GPOs)

Starter Group Policy objects (GPOs), introduced in Group Policy for Windows Server 2008, are collections of configured Administrative template (.admx) policy settings that you can use to create a live GPO. Each of the two packages in this download contains four starter GPOs.

http://www.microsoft.com/downloads/details.aspx?FamilyID=ae3ddba7-af7a-4274-9d34-1ad96576e823&DisplayLang=en

 

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB949037)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ecb72ad1-b31e-4c5e-b85c-968607c54b92&DisplayLang=en

 

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

 

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

 

Update for Windows Mail Junk E-mail Filter for x64-based Systems [April 2008] (KB905866)

http://www.microsoft.com/downloads/details.aspx?FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652&DisplayLang=en

 

Microsoft® Forefront™ codename "Stirling" Beta

Microsoft® Forefront™ codename "Stirling" is an integrated security system that delivers comprehensive, coordinated protection across endpoints, messaging and collaboration servers and the network edge that is easier to manage and control.

http://www.microsoft.com/downloads/details.aspx?FamilyID=65bd5f8a-d94c-457a-9f88-2046597130e1&DisplayLang=en

 

Extended Security Update Inventory Tool

The Extended Security Update Inventory Tool is used to detect security bulletins not covered by MBSA including MS04-028, February 2005 bulletins, and future security bulletins that are exceptions to MBSA.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

 

April 2008 Security Releases ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on April 8th, 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=6d59cb21-007f-4ee5-a440-d9caf613ae2a&DisplayLang=en

 

Security Development Lifecycle (SDL) Guidance

http://www.microsoft.com/downloads/details.aspx?FamilyID=2412c443-27f6-4aac-9883-f55ba5b01814&DisplayLang=en

 

Windows Server 2008 Security & Compliance Technologies

http://www.microsoft.com/downloads/details.aspx?FamilyID=a6e0026e-53ad-438d-994e-f5437a9d5842&DisplayLang=en

 

Microsoft Forefront Security for SharePoint with Service Pack 2

Forefront Security for SharePoint with Service Pack 2 helps business protect their Microsoft Office SharePoint Server 2007 and Windows SharePoint Services 3.0 collaboration environments by eliminating documents containing malicious code, confidential information, and inappropriate content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=e06453b8-b2dd-4177-969c-2f89aa841e11&DisplayLang=en

 

Security audit events for Microsoft Windows Server 2008 and Microsoft Windows Vista

A list of all security audit events for Windows Server 2008 and Windows Vista

http://www.microsoft.com/downloads/details.aspx?FamilyID=82e6d48f-e843-40ed-8b10-b3b716f6b51b&DisplayLang=en

 

Public Key Infrastructure (PKI) for Security Solutions Datasheet

This offering uses the customer’s existing investments in Microsoft technologies to create an internal PKI solution that corresponds to the customer’s needs.

http://www.microsoft.com/downloads/details.aspx?FamilyID=4832cf1f-7dfa-4ca3-b92a-7fd121b22703&DisplayLang=en

 

Foundation Network Companion Guide: Deploying Computer and User Certificates

This companion guide to the Foundation Network Guide provides instructions for deploying client computer and user certificates with Active Directory Certificate Services (AD CS).

http://www.microsoft.com/downloads/details.aspx?FamilyID=3c13f703-a033-4f00-b38b-21d76a02612b&DisplayLang=en

 

Identity Lifecycle Management (ILM) Datasheet

This offering uses Microsoft Identity Integration Server (MIIS) 2003 and best practices to simplify digital identity management and maintain data integrity.

http://www.microsoft.com/downloads/details.aspx?FamilyID=712704a6-82a9-4bd1-96c6-83b2c9522dfd&DisplayLang=en

 

Microsoft Security Intelligence Report (July - December 2007)

http://www.microsoft.com/downloads/details.aspx?FamilyID=bcc879db-9fe6-4331-b231-e274ea8fc804&DisplayLang=en

 

Implementing and Administering Certificate Templates in Windows Server 2008

This document provides concepts, procedures, and best practices for designing, administering, and implementing certificate templates.

http://www.microsoft.com/downloads/details.aspx?FamilyID=3c670732-c971-4c65-be9c-c0ebc3749e24&DisplayLang=en

 

Internet Security and Acceleration (ISA) Server 2006 180-Day Trial Version

ISA Server 2006 is the integrated edge security gateway that helps protect your IT environment from Internet-based threats while providing your users with fast and secure remote access to applications and data. ISA Server 2006 is available for download in both Standard Edition and Enterprise Edition.

http://www.microsoft.com/downloads/details.aspx?FamilyID=84504cad-893b-4212-9ab2-999ad1d8fe68&DisplayLang=en

 

BitLocker Recovery Password Viewer for Active Directory Users and Computers tool

The Bitlocker Active Directory Recovery Password Viewer helps to locate BitLocker Drive Encryption recovery passwords for Windows Vista- or Windows Server 2008- based computers in Active Directory Domain Services (AD DS).

http://www.microsoft.com/downloads/details.aspx?FamilyID=2786fde9-5986-4ed6-8fe4-f88e2492a5bd&DisplayLang=en

 

BitLocker Repair Tool

The BitLocker Repair Tool can assist administrators in recovering data from a corrupted or damaged disk volume that was encrypted with BitLocker.

http://www.microsoft.com/downloads/details.aspx?FamilyID=4ffd0d16-a51b-48b1-9042-ae1fb2de40c6&DisplayLang=en

 

Group Policy Documentation Survival Guide

This document provides links to documentation and other technical information for Group Policy in Windows Server 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=66643d52-bd3d-4b10-972c-316eca5dbedf&DisplayLang=en

 

BitLocker Drive Preparation Tool

The BitLocker Drive Preparation Tool configures the hard disk drives in your computer properly to support enabling BitLocker.

http://www.microsoft.com/downloads/details.aspx?FamilyID=320b9aa9-47e8-44f9-b8d0-4d7d6a75add0&DisplayLang=en

 

Microsoft Exchange Server 2007 Protocol Documentation

The Microsoft Exchange Server 2007 Protocol technical documentation set provides technical specifications for Microsoft protocols, and Microsoft extensions to industry-standard or other published protocols that are implemented and used in Microsoft Exchange Server 2007.

http://www.microsoft.com/downloads/details.aspx?FamilyID=a9aae935-ad23-4117-a3d9-9ed6093d6d7f&DisplayLang=en

 

Events/WebCasts 

 

Microsoft Security Webcast Series: Upcoming and On-Demand

 

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910 

Find security webcasts listed in an easy-to-use calendar format.

 

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx 

 

Register for the following Webcasts on the link above

 

TechNet Webcast: Information About Microsoft May Security Bulletins (Level 200)

Wednesday, May 14, 2008 11:00 A.M.-12:00 P.M. Pacific Time

 

IT Manager Webcast: How Microsoft IT Does Patch Management (Level 200)

Thursday, May 22, 2008 11:30 A.M.-12:30 P.M. Pacific Time

 

TechNet Webcast: Managing Windows Server 2008 with Server Manager (Level 200)

Thursday, May 22, 2008 11:30 A.M.-12:30 P.M. Pacific Time

 

IT Manager Webcast: How Microsoft IT does Secure Application Development (Level 200)

Thursday, May 29, 2008 11:00 A.M.-12:00 P.M. Pacific Time

 

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx  

 

A.O.B

 

Sign up for the Security Newsletter http://go.microsoft.com/?linkid=8687612

Visit the TechNet Security Centre http://go.microsoft.com/?linkid=8687613