| Publisher | Microsoft | ||
|---|---|---|---|
| Format | HTML | Date added | 01 Nov 2004 |
| Topics | .NET, Security Management | ||
| Downloads | 110 | ||
The core tenet of the attack surface reduction (ASR) philosophy is that all code has a nonzero likelihood of containing one or more vulnerabilities. Some vulnerabilities will result in customer compromise. Therefore, the only way to ensure no customer compromises is to reduce code usage to zero. ASR is a compromise between perfect safety and unmitigated risk that minimizes code exposed to untrusted users. Code quality and attack surface reduction combined can help produce more secure software. Perfect code cannot do it alone.
Did you find this white paper useful?
21 out of 50 users found this white paper useful
Related white papers
Microsoft ASP.NET Threading
This Microsoft Support WebCast will take an in-depth look at the Microsoft ASP.NET threading architecture, and what it means to your Web applications. You will learn how to monitor the...
Software Engineering Today - Best Practices & Patterns
This is the final webcast in the 15 part series ?Modern Software Development in .NET Using Visual Basic?. Developers shouldn?t miss this opportunity to examine the following topics with renowned...
Entertainment Retailer Expects Store Data Analysis to Increase Sales by $1.8 Million
Virgin Entertainment Group operates Virgin Megastores, one of the largest entertainment media retail specialty chains in the United States. Virgin wanted to increase the effectiveness of its store managers and...
Quest Connect Archive: white papers, demos and more!
Did you miss our virtual event? No problem! You can still get the latest information for Active Directory, Exchange, SharePoint, SQL Server and more - without leaving your computer!...
Crutchfield Case Study: A Win-Win Situation
Fast growth had pushed Crutchfield's data center to the maximum capacity of its cooling unit. The company wanted to reduce the number of physical machines to avoid buying a new...
Web Server Improvements with Microsoft Server 2008
This is another in our series about Microsoft Longhorn, also known as Server 2008. In this series we break down the most important components of Longhorn and give listeners the...
Protect Data and Client Trust: An End-to-End Approach to Protecting Your Web Applications and Your Organization
Every day, more and more business is conducted online creating new challenges for meeting Web application security and compliance. It's a hacker's dream and your security nightmare. Due to the...
