Home All Groups Group Topic Archive Search About

security engineering for windows forms

Author
22 Sep 2005 5:37 PM
VISHAL
Is there any security engineering section for windows form in .NET.
There is a security engineering section for web application in msdn
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/tmwawalkthrough.asp

Can the above section be used for windows form as well.
Any help is appreciated.

Author
23 Sep 2005 11:16 AM
Nicole Calinoiu
I don't know of any direct parallels for Windows forms applications, but
there's certainly no a priori reason you shouldn't use the web app threat
modeling guide as a starting point for developing your Windows app threat
model, particularly since most of the threats discussed in that document
apply equally well to distibuted Windows apps.  You might also want to take
a look at
http://msdn.microsoft.com/practices/Topics/security/default.aspx?pull=/library/en-us/dnpag2/html/SecurityGuidanceIndex.asp,
where the various lists of resource documents might highlight some
additional security implications that you may need to consider.

BTW, if you're new to threat modelling and would like a bit more of an
introduction before jumping in, a good place to start might be
http://blogs.msdn.com/ptorr/archive/2005/02/22/GuerillaThreatModelling.aspx.



Show quoteHide quote
"VISHAL" <VIS***@discussions.microsoft.com> wrote in message
news:EA9DBFC7-EBC5-4A67-AE4B-4D7CEC0077BB@microsoft.com...
> Is there any security engineering section for windows form in .NET.
> There is a security engineering section for web application in msdn
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/tmwawalkthrough.asp
>
> Can the above section be used for windows form as well.
> Any help is appreciated.
>
>
Author
23 Sep 2005 4:11 PM
VISHAL
Thanks

Show quoteHide quote
"Nicole Calinoiu" wrote:

> I don't know of any direct parallels for Windows forms applications, but
> there's certainly no a priori reason you shouldn't use the web app threat
> modeling guide as a starting point for developing your Windows app threat
> model, particularly since most of the threats discussed in that document
> apply equally well to distibuted Windows apps.  You might also want to take
> a look at
> http://msdn.microsoft.com/practices/Topics/security/default.aspx?pull=/library/en-us/dnpag2/html/SecurityGuidanceIndex.asp,
> where the various lists of resource documents might highlight some
> additional security implications that you may need to consider.
>
> BTW, if you're new to threat modelling and would like a bit more of an
> introduction before jumping in, a good place to start might be
> http://blogs.msdn.com/ptorr/archive/2005/02/22/GuerillaThreatModelling.aspx.
>
>
>
> "VISHAL" <VIS***@discussions.microsoft.com> wrote in message
> news:EA9DBFC7-EBC5-4A67-AE4B-4D7CEC0077BB@microsoft.com...
> > Is there any security engineering section for windows form in .NET.
> > There is a security engineering section for web application in msdn
> >
> > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/tmwawalkthrough.asp
> >
> > Can the above section be used for windows form as well.
> > Any help is appreciated.
> >
> >
>
>
>
>