TheArchitect.co.uk - Jorgen Thelin's weblog

• Microsoft Security Development Lifecycle Process Template for Visual Studio Team System

The SDL Process Template is a downloadable template that leverages the technology of Visual Studio Team System (VSTS) and Team Foundation Server (TFS) to automatically integrate the policy, process and tools associated with the Security Development Lifecycle v4.1 (SDL) into your software development environment.

• Installs SDL requirements as work items
• Includes SDL-based check-in policies
• Customizes security bugs and queries
• Includes extensive SDL how-to and guidance documentation
• Generates auditable Final Security Review report
• Accommodates third-party tool integration, e.g. the SDL Threat Modeling Tool
• Includes project plans and security risk assessment templates

[ Microsoft SDL Process Template for Visual Studio Team System ]

• Windows 7 Launch Date Set for October 22

Microsoft announced that Windows 7 will become commercially available on October 22 -- nicely in time for the holiday shopping season.

http://seattletimes.nwsource.com/html/businesstechnology/2009292656_windows03.html

So, put Windows 7 on your Christmas Wish List now -- you know you want it!

• Designing a Single-server MMO

Game Set Watch have posted an opinion piece by James Portnow, founder of Divide by Zero Games, that looks at the design approaches to creating unsharded MMOs, and the advantages that they can bring.

• News About Microsoft Services Connector (MSC) Release Plans

Here is some important news regarding Microsoft Services Connector (MSC) and "Geneva" Server release plans.

• Federated Identity: Geneva Beta 2 Released

Code name "Geneva" is Microsoft's open platform for user access that helps companies simplify access to applications and other systems with an interoperable claims-based model.

More info: http://www.microsoft.com/Geneva

• Domain-Proof Certificates for Microsoft Services Connector (MSC)

The Microsoft Services Connector (MSC) Team have received quite a few queries during the Tech Preview period about the way that MSC uses certificates for proof of domain ownership, so for future refer-ability I thought I would try to answer them here publicly.

Question: "What is the reasoning behind the list of CA's supported?"

• Microsoft Security Intelligence Report - Volume 6

The Microsoft Security Intelligence Report (SIR) provides an in-depth perspective on the changing threat landscape including software vulnerability disclosures and exploits, malicious software (malware), and potentially unwanted software. Using data derived from hundreds of millions of Windows users, and some of the busiest online services on the Internet, this report also provides a detailed analysis of the threat landscape and the changing face of threats and countermeasures and includes updated data on privacy and breach notifications. The sixth volume of the report is now available