Microsoft's Attack Surface Analyzer

Microsoft's Attack Surface Analyzer Tool

Attack
Surface Analyzer tool is announced by the microsoft regarding the
issues of the security changes.It detects all the changes have been done
in the security by analyzing the registry entries,ActiveX controls
& the added files in the windows system.

The aim of the
microsoft developer is very clean that any 3rd party software is
installed on the system then this tool is checking that weather the
installed tool increased the attack surface on the windows platform or
not.To generate a report, the tool needs to scan a system before and
after the program in question is installed.


[You must be registered and logged in to see this link.]


Overview

Attack
Surface Analyzer is developed by the Security Engineering group,
building on the work of our Security Science team. It is the same tool
used by Microsoft's internal product groups to catalogue changes made to
operating system attack surface by the installation of new software.

Attack
Surface Analyzer takes a snapshot of your system state before and after
the installation of product(s) and displays the changes to a number of
key elements of the Windows attack surface.

This allows:

- Developers to view changes in the attack surface resulting from the introduction of their code on to the Windows platform
-
IT Professionals to assess the aggregate Attack Surface change by the
installation of an organization's line of business applications
- IT
Security Auditors evaluate the risk of a particular piece of software
installed on the Windows platform during threat risk reviews
- IT
Security Incident Responders to gain a better understanding of the state
of a systems security during investigations (if a baseline scan was
taken of the system during the deployment phase)



Download::
[You must be registered and logged in to see this link.]