Secure Coding mailing list archives
Unclassified NSA document on .NET 2.0 Framework Security
From: mlyman-cissp at comcast.net (Mike Lyman)
Date: Mon, 24 Nov 2008 11:31:09 -0600
Dinis Cruz wrote:
Don't get me wrong, this is a great document if one is interested in writing applications that use CAS (Code Access Security), I would love for this to be widely used.
When we recommended recommending CAS during a review of the U.S. Defense Information System Agency's new Application Security and Development Security Technical Implementation Guide earlier this year we were met with what amounted to blank stares. (At least it seemed like that since it was a phone conference.) Some on the call understood it and agreed with the recommendation but those hosting the call and doing the writing didn't seem to grasp it. It may be a while before we see too many adopting this or requiring it for a while. -- Mike Lyman mlyman at west-point.org
Current thread:
- Unclassified NSA document on .NET 2.0 Framework Security Romain Gaucher (Nov 22)
- Unclassified NSA document on .NET 2.0 Framework Security Dinis Cruz (Nov 24)
- Unclassified NSA document on .NET 2.0 Framework Security Mike Lyman (Nov 24)
- Unclassified NSA document on .NET 2.0 Framework Security Gary McGraw (Nov 24)
- Unclassified NSA document on .NET 2.0 Framework Security Gunnar Peterson (Nov 25)
- Unclassified NSA document on .NET 2.0 Framework Security Stephen Craig Evans (Nov 25)
- Unclassified NSA document on .NET 2.0 Framework Security Gunnar Peterson (Nov 25)
- Unclassified NSA document on .NET 2.0 Framework Security Stephen Craig Evans (Nov 25)
- Unclassified NSA document on .NET 2.0 Framework Security Stephen Craig Evans (Nov 25)
- Unclassified NSA document on .NET 2.0 Framework Security Gary McGraw (Nov 25)
- Unclassified NSA document on .NET 2.0 Framework Security Gunnar Peterson (Nov 25)
- Message not available
- Unclassified NSA document on .NET 2.0 Framework Security Gunnar Peterson (Nov 25)
- Unclassified NSA document on .NET 2.0 Framework Security Stephen Craig Evans (Nov 26)
- Unclassified NSA document on .NET 2.0 Framework Security Mike Lyman (Nov 24)
- Unclassified NSA document on .NET 2.0 Framework Security Dinis Cruz (Nov 24)