Securing Enterprise Web Applications at the Source: An Application Security Perspective

Microsoft’s Approach to Threat Modeling: STRIDE and DREAD Architecture Overview Support for Core Security Services Cryptography Code Access Security Analysis Conclusions