Document Details
Threat Modeling Tool Sensitive Data
❌
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Bias Types:
⚠️
windows_tools
⚠️
windows_first
⚠️
missing_linux_example
⚠️
powershell_heavy
Summary:
The documentation exhibits a Windows bias by referencing Windows-specific tools and technologies (e.g., Encrypted File System (EFS), DPAPI, BitLocker, Windows Intune) without mentioning or providing equivalent Linux alternatives. In several sections, Windows solutions are mentioned first or exclusively, and example code/configuration is often tailored to Windows-centric frameworks (e.g., .NET, WCF, ASP.NET). There is a lack of Linux-specific examples or guidance for cross-platform parity.
Recommendations:
- For every Windows-specific technology mentioned (e.g., EFS, DPAPI, BitLocker), provide equivalent Linux alternatives (e.g., eCryptfs, LUKS/dm-crypt, GnuPG, libsecret) and explain their usage.
- When discussing file system encryption, include both Windows (EFS, BitLocker) and Linux (LUKS, eCryptfs) options, and provide example commands or configuration for both.
- In sections referencing DPAPI, add information about Linux key management and encryption APIs (e.g., GnuPG, OpenSSL, libsecret) for storing sensitive data.
- For Azure Disk Encryption, clarify and provide equal detail for both Windows (BitLocker) and Linux (dm-crypt) implementations, including example commands or references.
- Where configuration or code examples are given (e.g., web server headers, password hashing), include cross-platform or Linux/Unix examples (e.g., Apache/Nginx config, Python/Java password hashing).
- Avoid using only .NET or Windows-centric frameworks in code samples; supplement with examples in other popular cross-platform languages (e.g., Python, Java, Node.js) where possible.
- Reference Linux and open-source documentation alongside Microsoft/Windows links, especially for generic security concepts.
- Review and update references to ensure parity in guidance for both Windows and Linux environments.
Create pull request
Scan History
| Date | Scan ID | Status | Bias Status |
|---|---|---|---|
| 2025-08-17 00:01 | #83 | in_progress | ✅ Clean |
| 2025-07-13 21:37 | #48 | completed | ✅ Clean |
| 2025-07-12 23:44 | #41 | in_progress | ❌ Biased |
Flagged Code Snippets
<configuration>
<system.webServer>
<httpProtocol>
<customHeaders>
<add name="Cache-Control" value="no-store" />
<add name="Pragma" value="no-cache" />
<add name="Expires" value="-1" />
</customHeaders>
</httpProtocol>
</system.webServer>
</configuration>
<system.serviceModel>
<bindings>
<wsHttpBinding>
<binding name=""MyBinding"">
<security mode=""None""/>
</binding>
</bindings>
</system.serviceModel>
<system.serviceModel>
<bindings>
<wsHttpBinding>
<binding name=""MyBinding"">
<security mode=""TransportWithMessageCredential""/>
<message clientCredentialType=""Windows""/>
</binding>
</bindings>
</system.serviceModel>