all groups > dotnet security > september 2005 >
You're in the

dotnet security

group:

security engineering for windows forms


security engineering for windows forms VISHAL
9/22/2005 10:37:07 AM
dotnet security:
Is there any security engineering section for windows form in .NET.
There is a security engineering section for web application in msdn

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/tmwawalkthrough.asp

Can the above section be used for windows form as well.
Any help is appreciated.

Re: security engineering for windows forms Nicole Calinoiu
9/23/2005 7:16:03 AM
I don't know of any direct parallels for Windows forms applications, but
there's certainly no a priori reason you shouldn't use the web app threat
modeling guide as a starting point for developing your Windows app threat
model, particularly since most of the threats discussed in that document
apply equally well to distibuted Windows apps. You might also want to take
a look at
http://msdn.microsoft.com/practices/Topics/security/default.aspx?pull=/library/en-us/dnpag2/html/SecurityGuidanceIndex.asp,
where the various lists of resource documents might highlight some
additional security implications that you may need to consider.

BTW, if you're new to threat modelling and would like a bit more of an
introduction before jumping in, a good place to start might be
http://blogs.msdn.com/ptorr/archive/2005/02/22/GuerillaThreatModelling.aspx.



[quoted text, click to view]


Re: security engineering for windows forms VISHAL
9/23/2005 9:11:04 AM
Thanks

[quoted text, click to view]
AddThis Social Bookmark Button