Microsoft releases security tools for ASP, ASP.Net

InfoWorld | at | by Mike

Microsoft on Tuesday released SQL injection defense and detection tools designed to help developers fight attacks on Web sites that use ASP and ASP.Net technologies.

The tools include URLScan 3.0, which is in beta release, and Microsoft Source Code Analyzer for SQL Injection, available as a Community Technology Preview. Additionally, HP on Tuesday released Scrawlr, a SQL injection detection tool developed by the HP Web Security Research Group and Microsoft.

Developed to help battle recent SQL injection attacks as per a Microsoft Security Advisory bulletin, the tools are intended to help developers build more secure code and promote a more trusted ecosystem, Microsoft said.