Michael Howard on Attack Surface Reduction

Michael Howard may not blog quite as often as some, but he's always worth reading, so if you haven't subscribed, and you care about security, you should.

In his latest post, Michael provides links to several sources of information on reducing the attack surface of an application, a crucial part of securing any system. This is good stuff, and it's because a guy like Michael Howard is working to improve the security situation at Microsoft that I'm confident that things will continue to get better. As an aside, if you have the opportunity to see one of his conference talks, make sure you don't miss it. It's definitely time well spent.

Also, a previous post mentions the availability of a monthly Security newsletter from Microsoft (Passport account required).