Microsoft Security Development Lifecycle (SDL) announcement
-
Link
Announcement originially posted Tuesday, August 03, 2010 9:59 PM
Hi everyone,
We've talked with some people experiencing problems when trying to install the MSF-Agile+SDL v5.0 process template. We believe these problems are a result of an incompatibility with certain configurations of Sharepoint, and we are working to correct the issue for the next release of the MSF-Agile+SDL template. In the meantime, you should be able to work around the problem by following these instructions to disable the Sharepoint features of the template:
- Uninstall the template if you've already installed it.
- Reinstall the template files, and uncheck the Additional Sharepoint Components feature during the installation process.
- Using your XML editor of choice, open the file <template install dir>\Process Template\Windows SharePoint Services\wsstasks.xml.
- Near the bottom of the file, you will see the lines:
<!--TfsDashboardSDLAgile -->
<feature featureId="3F6F501A-5DFF-4359-8ED8-232784DFF47E" />
5. Comment out the second line, ie:
<!--TfsDashboardSDLAgile -->
<!-- <feature featureId="3F6F501A-5DFF-4359-8ED8-232784DFF47E" /> -->
6. Save the file and close
7. Open the Process Template Manager in Visual Studio
8. Delete the existing "MSF for Agile Software Development plus Security Development Lifecycle (SDL) v5.0" process template.
9. Upload the process template again, browse for <template install dir>\Process Template\process template.xml.
10. Close the Process Template Manager.
You should now be able to create MSF-A+SDL projects. If you're experiencing the install bug, please let us know if this helps workaround the problem (or if it doesn't).
Thanks,
Bryan
-
Link
Download the templates for SDL practices, a library of templates to help you get started with the more thought-based SDL practices or activities: Defining Security Requirements, Creating a Security Bug Bar, Performing a Security Risk Assessment, Conducting a basic threat model, Managing SDL Exception Requests, Performing a Final Security Review.
-
Link
The SDL team has recently announced updated versions of three SDL tools:
SDL Threat Modeling Tool v3.1.8
Check them out and feel free to provide comments and feedback.
- Link
- Link
-
Unanswered1VotesCustomizing rules in Threat Modeling Tool 2014
The Microsoft Security Blog that announced the Threat Modeling Tool 2014 stated the following: "We [offer] further flexibility to our users to customize the tool ...1 Replies | 37 Views | Created by Matthew Theobald - Tuesday, May 13, 2014 8:06 PM | Last reply by Michael Leonard 2 - 32 minutes ago
-
Unanswered0Votes
Modeling a data flow between a process and a file with Threat Modeling Tool 2014
What is the best way to model a data flow in Threat Modeling Tool 2014 between a process and a file on the local filesystem? - for example, a process reading an application configuration file on ... -
Unanswered0Votes
Threat Modeling Tool 2014 - modeling an FTP connection
What king of connection or Flow should I be using to model an FTP connection using the new Threat Modeling tool? Thanks in advance. -
Discussion0Votes
is't true or ........?
Dear/........... i received this message at my email and that inform me I'm winner it's request me about all my information ...1 Replies | 91 Views | Created by Amedo.Sol - Sunday, May 11, 2014 6:12 PM | Last reply by Amedo.Sol - Sunday, May 11, 2014 6:18 PM -
Unanswered0Votes
Connecting to Secure WCF REST Service from Mobile application
Hi, we have a web application which is hosted in IIS and it contains the WCF REST Service(Json Output). We are developing an mobile application and ... -
Unanswered0Votes
Access is denied from logon
Ok so I turned my computer on, logged on and it froze, so i turned it off by holding down the power source button button and turned it back on. It then started to do something with my hard drive and ... -
Unanswered0Votes
Did microsoft remove the ability to add a threat in the Threat Modeling Tool 2014?
I am new to using this tool but it is required by my company to perform Threat Modeling. I have been frantically looking for the ability to add a threat not automatically generated by the Analysis ... -
Answered0Votes
Microsoft Threat Modeling Tool (Deep Copy)
Greetings -- I was hoping someone might be able to tell me if it's possible to perform a 'deep copy' using the Microsoft Threat Modeling tool. My problem: ...2 Replies | 1378 Views | Created by Adam.M.Schroeder - Tuesday, February 12, 2013 12:11 AM | Last reply by Vovchara - Wednesday, April 16, 2014 10:54 PM -
Unanswered0Votes
SDL Threat Modelling Tool Error
Running on Win 7 64bit with Visio 2010 installed. (Also tried on a 32 bit Win 7 machine with similar results) Install runs fine, but when opening the program and try clicking on ...1 Replies | 987 Views | Created by ts6 - Wednesday, April 10, 2013 10:07 AM | Last reply by Vovchara - Wednesday, April 16, 2014 10:51 PM -
Unanswered0Votes
Examples files ".tms"
Hello, I am working with "Threat modeling tool" and am looking for some examples files. "tms" Do you ...2 Replies | 321 Views | Created by haltu - Monday, December 02, 2013 6:34 PM | Last reply by Vovchara - Wednesday, April 16, 2014 10:49 PM -
Unanswered0Votes
problem with installing microsoft threat modeler
Hi i download microsoft threat modeler and i installed microsoft visio 2010 before installing microsoft threat modeler but i still have ...1 Replies | 218 Views | Created by hamicoo - Friday, November 22, 2013 10:01 AM | Last reply by Vovchara - Wednesday, April 16, 2014 10:43 PM -
Unanswered0Votes
SDL Threat Modeling Tool installer not recognizing visio 2007
I am trying to install the SDL Threat Modeling tool on my machine. I'm not running the installer as an administrator, and it prompts me to 'Visit Web Site' to install Visio. But I already have Visio ...1 Replies | 291 Views | Created by b3d0uin_ - Tuesday, November 12, 2013 9:46 AM | Last reply by Vovchara - Wednesday, April 16, 2014 10:43 PM -
Proposed10Votes
Threat Model Tool compatible with Visio 2013
I have Visio 2013 installed and the Threat Model Tool is throwing an error dialog stating that it is incompatible with this version. When will a release or beta of a Visio 2013 ...10 Replies | 3734 Views | Created by David Rubert - Thursday, January 10, 2013 6:26 PM | Last reply by Vovchara - Wednesday, April 16, 2014 10:42 PM -
Unanswered0Votes
SDL Threat Modeling Tool 3.1.8 Error "The tool encountered a serious problems and needs to close"
Receiving the error below while trying to run SDL v3.1.8. I do not have Visio 2007 or 2010 to revert to, only Vision 2013. Installed Software: Microsoft ...1 Replies | 272 Views | Created by Jack_c_Jones - Tuesday, February 11, 2014 8:12 PM | Last reply by Vovchara - Wednesday, April 16, 2014 10:40 PM -
Answered0Votes
SDL Threat Modeling Tool 3.1.8 Error "The tool encountered a serious problem and needs to close"
Installed Software: Microsoft Windows 8 (64 bit - German) Microsoft Office 2010 Professional Plus (32 bit - German) Microsoft Visio Premium ...3 Replies | 1405 Views | Created by AndreasKoschBnetza - Tuesday, March 19, 2013 11:55 AM | Last reply by Vovchara - Wednesday, April 16, 2014 10:39 PM -
Unanswered0Votes
sdl threat modelling tool: Unable to get the window handle for the 'AxDrawingControl'
Visio 2010 and 2013 are both installed, win 7 64 SDLTM.exe Information: 0 : Starting application, time: Wednesday, March 19, 2014 9:51:05 ...1 Replies | 152 Views | Created by Rashiel - Wednesday, March 19, 2014 4:53 PM | Last reply by Vovchara - Wednesday, April 16, 2014 10:38 PM -
Unanswered0Votes
-
Answered0Votes
directory ACL analysis by the Attack Surface Analyzer
Hello, We recently ran the Attack Surface Analyzer tool (ASA tool henceforth) against one of our products and have a couple questions concerning directory ...2 Replies | 3435 Views | Created by jdaviss - Tuesday, August 21, 2012 10:13 PM | Last reply by gs232 - Monday, March 10, 2014 2:10 PM -
Unanswered0Votes
-
Unanswered0Votes
MSXML 3.0, 4.0 and 6.0 dll versions
I have been assigned to find-out what certain machines (7(32/64)/2008 R2(32/64) and 2003 R2(32) are reporting thru NESSUS Tool as outstanding for the MSXML 4.0 SP2. The article reference by Nessus is ... - Items 1 to 20 of 230 Next ›
Microsoft Security Development Lifecycle (SDL) announcement
-
Link
Announcement originially posted Tuesday, August 03, 2010 9:59 PM
Hi everyone,
We've talked with some people experiencing problems when trying to install the MSF-Agile+SDL v5.0 process template. We believe these problems are a result of an incompatibility with certain configurations of Sharepoint, and we are working to correct the issue for the next release of the MSF-Agile+SDL template. In the meantime, you should be able to work around the problem by following these instructions to disable the Sharepoint features of the template:
- Uninstall the template if you've already installed it.
- Reinstall the template files, and uncheck the Additional Sharepoint Components feature during the installation process.
- Using your XML editor of choice, open the file <template install dir>\Process Template\Windows SharePoint Services\wsstasks.xml.
- Near the bottom of the file, you will see the lines:
<!--TfsDashboardSDLAgile -->
<feature featureId="3F6F501A-5DFF-4359-8ED8-232784DFF47E" />
5. Comment out the second line, ie:
<!--TfsDashboardSDLAgile -->
<!-- <feature featureId="3F6F501A-5DFF-4359-8ED8-232784DFF47E" /> -->
6. Save the file and close
7. Open the Process Template Manager in Visual Studio
8. Delete the existing "MSF for Agile Software Development plus Security Development Lifecycle (SDL) v5.0" process template.
9. Upload the process template again, browse for <template install dir>\Process Template\process template.xml.
10. Close the Process Template Manager.
You should now be able to create MSF-A+SDL projects. If you're experiencing the install bug, please let us know if this helps workaround the problem (or if it doesn't).
Thanks,
Bryan
-
Link
Download the templates for SDL practices, a library of templates to help you get started with the more thought-based SDL practices or activities: Defining Security Requirements, Creating a Security Bug Bar, Performing a Security Risk Assessment, Conducting a basic threat model, Managing SDL Exception Requests, Performing a Final Security Review.
-
Link
The SDL team has recently announced updated versions of three SDL tools:
SDL Threat Modeling Tool v3.1.8
Check them out and feel free to provide comments and feedback.
- Link
- Link
