Saturday, March 13, 2004

Quick Security Audit

I am planning to develop a template driven engine that will generate user interface, business layer, data layer and Stored procedures for .NET & SQL Server. Not sure if i will be able to develop the template builder but then i want to audit all the generated code against configurable enterprise-wide best practices and guidelines (rules).

I am currently in the preparation phase trying to hunt/collect everything that is available on WWW. Please leave me a comment if you got any ideas.

This is what came to me as a surprise Microsoft Baseline Security Analyzer V1.2.

MBSA scans almost all .NET enterprise servers to identify common security misconfigurations.

If you like the tool then you got to visit Shavlik Technologies who created this wonderful tool for MS. They have many more auditing tools to be explored by the IT pros.

Happy Exploring!