Improving Web Application Security: Threats and Countermeasures

Install MBSA, using Mbsasetup.msi, to a tools directory. Copy the file Mssecure.cab to the MBSA installation directory.

• Download MBSA . Download MBSA from the MBSA Home Page: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/Tools/mbsahome.asp

• Updates for MBSA . If the machine you use has Internet access, the latest security XML file will be downloaded automatically, if needed. If your computer does not have Internet access, you need to download the latest XML file using the signed CAB at the following location: http://download.microsoft.com/download/xml/security/1.0/NT5/EN-US/mssecure.cab

  The CAB file is signed to ensure it has not been modified. You must uncompress it and store it in the same folder where MBSA is stored.

  Note	To view the latest XML file without downloading it, use the following location: https ://www.microsoft.com/technet/security/search/mssecure.xml

• Default installation directory: \Program Files\Microsoft Baseline Security Analyzer\

  Note	You need to run commands from this directory. MBSA does not create an environment variable for you.