|
Provided by: Affinity IT Training, LLC Level 1 NET Security |
 |
Training
Provided by Affinity IT Training, LLC
.NET revolutionizes application security by providing the framework
for developing secure Windows and Web applications. This course teaches
you the basic concepts underlying Code Access Security, role-based
security, and how to implement security in your applications to protect
your code and your users against attack. This is the first of two courses.
Audience:.NET developers seeking knowledge of security for their Windows and Web applications.
|
|
||||||||||
Level 1 NET Security
Objectives
- Administer security policy.
- Create and digitally sign assemblies.
- Validate data and handle errors safely.
- Choose the right permission set for your code.
- Manage Windows security.
- Use Windows role-based security in your applications.
- Work with Isolated Storage.
Outline
ASP.NET Security
ASP.NET Security Overview
Windows Authentication
Forms Authentication
Custom Authentication
Enterprise Services
Enterprise Services Overview
Creating Serviced Components
Administering COM+ Security
Testing the Inventory Application
Security for .NET Remoting
.NET Remoting Overview
Hosting Remoting in ASP.NET
Secure Remoting with IIS and ASP.NET
Web Services
Web Services Overview
Disabling Unwanted Protocols
Secure Web Services with IIS and ASP.NET
Deployment
Deploying Security Policy
No-Touch Deployment
.NET Deployment Options
Deploying ASP.NET Applications
Cryptography in .NET
Basic Cryptographic Concepts
Working with Data
Using Asymmetric Cryptography
Hash Codes
Digital Signatures
Creating Random Keys
Handling Common Threats
Thinking About Security
Buffer Overflows
SQL Injection
Cross-Site Scripting
Keeping Current
The Human Element
Setup
- Internet Explorer 6 (or equivalent)
- Microsoft Visual Studio .NET
- Internet access preferred
Seminar Pre-Requisites
- Visual Studio .NET Introduction
Training Materials
- Course Workbook
Jan08
About The Training Provider: Affinity IT Training, LLC
Affinity IT Training, LLC - .
We are a provider of hands-on, instructor-led IT training for the global business community including website development, databases, programming languages and more. Training includes: ASP, .NET, C#, C , DB2, AJAX, JavaScript, HTML/XHTML/XML, Unix, Linux, Perl, Python, Ruby On Rails, Oracle, Sybase, SQL Server, Project Management Training and customized Integrated Case Study.
