Microsoft have released a number of bits & pieces that I thought I’d share.
The first of these is the Developer Highway Code :
To build software that meets your security objectives, you must integrate security activities into your software development lifecycle.
This handbook captures and summarises the key security engineering activities that should be an integral part of your software development processes.
There are five PDF’s – totalling 12.0 MB in size :
Part I: Securing Engineering (23 pages)
Part II: Checklists and Question Lists (121 pages)
Or you can simply download the entire book – in one PDF :
Developer Highway Code (163 pages)
Something I didn’t notice till I’d grabbed all five parts !
Some weighty stuff to get through, but well worth a read, work out what checking/testing you might need with regard to building a secure site.
Something else worth a view – and a print-out – is the .NET Framework 3.5 Common Namespaces and Types Poster. Doesn’t look so good in A4 – maybe try A3 if you can.
Windows Workflow Foundation (as part of .NET 3.5) has been lacking some “getting started” info – it’s pretty complicated. There’s now the Windows Workflow Foundation Web Workflow Approvals Starter Kit – which covers a sample company, with work order requests :
This starter kit is a Visual Studio 2005 (with updates for Visual Studio 2008) project that demonstrates using Windows Workflow Foundation for simple task-oriented workflow in an ASP.NET Web application.
A workflow model is used to automate work order requests at a small example company.
It includes three pre-defined roles which each play a part in the work order creation, approval and monitoring.
The starter kit may be modified for other workflow models to suit other small Web-based task management systems.
As well as the Simple Human Workflow Quickstart Sample Code with starter code samples, designed to ease the development of user friendly / human interactive processes – and even approvals and escalations.
The Simple Human Workflow Quickstart contains sample code that demonstrates how to build activities that interact with people so that a developer can easily build workflow enabled applications which involve simple approvals and escalation.
In this sample we demonstrate how to make use of Active Directory or an alternative directory for organizational hierarchy lookups.
We also demonstrate activities that interact with Microsoft Live Communication Server for user presence detection and also sending and receiving of instant messages.
Additionally this sample demonstrates activities for sending emails and receiving correlated responses from those emails. Example code for email includes using Outlook technologies, or using IIS SMTP Service technologies, or using Microsoft Exchange Server technologies.
This sample includes project and solution files for Visual Studio 2008.
A whitepaper is also published which describes the sample and how it is put together.
The interaction with LCS is an interesting one – will be the next BIG area of change, Web 2.0, etc. Detecting whether a person is online, and able to receive a workflow activity task – that’s cool.
Will have to wait and see – might have to check-out the code to connect with LCS, and use from a web service – in K2[blackpearl]. The best of both worlds !