Thursday, April 13, 2006

Security Developer Center: Using Application Verifier Within Your Software Development Lifecycle

Security Developer Center: Using Application Verifier Within Your Software Development Lifecycle: "The Microsoft� Application Verifier (AppVerifier) is a runtime verification tool for unmanaged code that assists in finding subtle programming errors, security issues and limited user account privilege problems that can be difficult to identify with normal application testing techniques.
Introduction
One of the biggest challenges faced by programmers, software architects, testers, and security consultants is to understand the consequences of their applications when deployed into production. Even with access to source code, it is difficult to grasp everything that will occur during execution due to a variety of dependencies (for example. multiple groups contributing to code or leveraging external components). The Microsoft AppVerifier can play a critical role in helping to manage this complexity and the potential side effects of bugs. The AppVerifierassists in finding subtle programming errors, security issues, and user account privilege problems that can be difficult to identify during a typical test pass."

No comments: