Microsoft updates free security tools

Microsoft enhanced three of its free Security Development Lifecycle (SDL) tools – Threat Modeling, MiniFuzz, and RegExFuzz.

Threat Modeling Tool 3.1.8

The Threat Modeling Tool is used in the SDL Design Phase to find security problems before coding begins. Through beta testing we obtained valuable input on what changes could be made to improve the tool. This version focuses on stabilization of the Visio 2010 and Team Foundation Server (TFS) 2010 support that was provided as part of the beta release, and fixed bugs that were discovered.

MiniFuzz Tool 1.5.5

The MinFuzz Tool provides basic file fuzzing capabilities that can be applied by developers, testers and even those with limited experience with fuzz testing as part of the SDL Verification phase. The new version of the tool includes support for Team Foundation Server (TFS) 2010, fixed stability bugs and made it easier to control target application shutdown.

RegExFuzz Tool 1.1.0

The RegExFuzz Tool provides regular expression fuzzing capabilities that can be applied during the SDL Verification phase to check that regular expression evaluation times are not exponential. Regular expressions with very long evaluation times can lead to DoS attacks. The new version focuses on bug fixes requested from field use of the tool.