Microsoft Security Guidance Training for Developers
Unfiled
This one-day instructor-led clinic provides students with knowledge and skills essential for the creation of applications with enhanced security. Students will learn about the need for implementing security at every stage of the development process and best practices for applying security principles. Students will also learn how to use established threat modeling methodologies and tools with other best practices to minimize vulnerabilities and limit damage from attacks. Finally students will learn how to implement security features to enhance security for Web applications and Web services that are built by using Microsoft ASP.NET.
|
|
Program Outline
Session 1: Essentials of Application Security
This session provides the knowledge and skills essential for the creation of applications with enhanced security. The session covers important security concepts and the need for implementing security at every stage of the development process. Additionally this session discusses how to use various security technologies to increase data and communications security and describes the security enhancements included with Windows XP Service Pack 2.
Topics
Session 2: Writing Secure Code Best Practices
This session identifies best practices for applying security principles throughout the development process. The session also describes established threat modeling methodologies and tools and how they can be applied with other best practices to minimize vulnerabilities and limit damage from attacks.
Topics
Session 3: Writing Secure Code Threat Defense
This session builds upon existing knowledge of secure coding best practices and threat modeling to identify a variety of threat scenarios. The session covers effective strategies for defending common security threats such as buffer overruns cross-site scripting SQL injection and denial of service attacks.
Topics
Session 4: Implementing Application Security Using the .NET Framework
This session describes how to implement additional security features for applications that are built on the .NET Framework. The session describes how to use both code access security and role-based security to limit vulnerabilities and how to use the cryptographic provider support in the .NET Framework to encrypt and sign data. In addition the session explains how to secure Web applications and Web services that are built by using ASP.NET.
Topics
About Microsoft Clinics
Microsoft Official Clinic learning products provide students with technical information on Microsoft products or technologies while discussing real-world considerations for their implementation. Clinics highlight features and functionality through product demonstrations.
Related Exams
No Microsoft Certified Professional exams are associated with this course currently.
Student Pre-Requisites
Before attending this clinic students must have:
Student Materials
The student kit includes comprehensive notes supporting the topics discussed.
Program Goals
After completing this clinic students will be able to:
