Anatomy of an IT disaster: How the FBI blew it

Some FBI agents ruefully refer to the trilogy project, a massive initiative to modernize the FBI's aging technology infrastructure, as the "Tragedy" project. It certainly has all the earmarks of tragedy: the best intentions, catastrophic miscommunication, staggering waste.

SQL Server 2005 Editions and Integration Services

The SQL Server 2005 product family has now been announced, so with four editions available, what does this mean for SQL Server Integration Services? Starting from the bottom we have the free edition known as Express, and the entry level Workgroup edition, and neither include the full IS product. They have the Import/Export capabilities, but nothing more, so for simple loading and extraction of data this should suffice, but you will not be able to build packages.

Part 2: Mapping XML from SQL Server to a Single Cell in Excel 2003

In the second of this three-part series, learn how to map well-formed XML from a standard SQL Server query to a single cell in a worksheet. The resulting output is an XML tree with non-repeating elements.

Part 1: Automating the XML Data Mapping Process in Excel 2003

In the first of a three-part series, learn how to use XML maps to customize Excel as a data input and display system.

Multi-User Considerations in Data Synchronization for SQL Server 2005

Gain a better understanding of how to develop your SQL Server Mobile applications to handle multi-user access and data synchronization with Microsoft SQL Server 2005.

HIGHER SOURCE RAISES STAKES IN INTERNET INDUSTRY

Microsoft Corporation has announced plans to acquire the
Website and Internet development corporation Higher Source for an
undisclosed fee.

MSSQL Server Reporting Services: Black Belt Administration: "Governor"

In working with many reporting tools over my career, particularly within enterprise business intelligence suites and high-end production reporting systems, I have become acquainted with various control features in each that allow administrators to govern the actions of end users. Reporting Services is no different in this aspect of need for control, and the application provides numerous avenues for restraining our users from kicking off resource crippling queries that, unchecked, could disrupt even the most robust systems, as well as to prevent other harmful activities. At various junctures within this series, we will examine ways to effect such controls on an intermittent basis.

Teach Old Data New Tricks with the Fully Loaded Advances in ADO.NET 2.

The Microsoft® .NET Framework 2.0 delivers an updated ADO.NET that will streamline your data access development efforts. The ADO.NET team has worked with both the System.Xml team and the SQL Server™ team to provide a consistently rich developer experience, crossing technology boundaries from ADO.NET to XML and back. This will all be apparent as you dig into ADO.NET 2.0. There are improvements on so many fronts that you will certainly be pleased.

Rather than attempt to list every new and updated feature of ADO.NET 2.0, I will discuss in detail some of the more interesting improvements and focus on performance and flexibility.

Using Source Control to Develop Smarter

Veteran and novice developers alike need source control management (SCM). Also known as asset management, and source code management, SCM helps you (and your team) manage development projects, and the components and code that make up the project.

There are many benefits to using source control management, most notably the ability to develop code faster, smarter and more accurately. Source control management tools help you control your code; especially in multiple developer projects.

The Trustworthy Computing Security Development Lifecycle

This paper discusses the Trustworthy Computing Security Development Lifecycle (or SDL), a process that Microsoft has adopted for the development of software that needs to withstand malicious attack. The process encompasses the addition of a series of security-focused activities and deliverables to each of the phases of Microsoft's software development process. These activities and deliverables include the development of threat models during software design, the use of static analysis code-scanning tools during implementation, and the conduct of code reviews and security testing during a focused "security push". Before software subject to the SDL can be released, it must undergo a Final Security Review by a team independent from its development group. When compared to software that has not been subject to the SDL, software that has undergone the SDL has experienced a significantly reduced rate of external discovery of security vulnerabilities. This paper describes the SDL and discusses experience with its implementation across Microsoft software.