-=[FREE]=- Microsoft Attack Surface Analyzer

Microsoft’s Attack Surface Analyzer is an SDL verification tool for developers and IT professionals to identify whether newly developed or installed applications inadvertently change the attack surface of a Microsoft Operating System.  The free tool is downloadable from Microsoft’s website and is the same tool used by internal Microsoft product development teams.

Can’t wait to get home and download this tool, and see what it can do.  Microsoft will offer consulting services pertaining to SDL beginning in February.  The goal is to improve software security and reduce both customer risk and costs of development.  Other free tools (SDL Binscope Binary Analyzer, SDL Threat Modeling Tool) were also updated.

Microsoft is also releasing a report it commissioned from Forrester Consulting, entitled “State of Application Security,” studying the current state of application development practices and  investigating the potential return on investment by incorporating holistic security methodologies into product development life cycles.  The findings in the report validate the notion that addressing security early makes good business sense.   You can find a copy of the report on the Microsoft Download Center.


Open Source Kinect Developments Continue

There have been a number of exciting developments in the last few days related to XBox Kinect.  Kinect is a brand new interface to the Microsoft XBox games console. allowing users to interact with games without using a controller.  By using infra-red light, the device is able to map the environment and recognise gestures (using software).

Hector Martin released a quick hack three hours into the European launch and released his results and code into the wild – named ‘libfreenect’.  The NUI Group plan to release their driver as open source once their $10k donation fund is filled up.  Shortly after,  Theo Watson ported it to OSX.

Won’t be long we should be seeing some very interesting applicaitons for this Kinect.  Since several sites have been listing the part loads for duplicating this product from scratch at around $60, I expect to be using one in the new year for motion capture for character animation, as well as 3D scanning for character creation once the quality or output improves.

More at CreativeApplications