MS2805 - Security Seminar for Developers
| Categories |
.NET Training, Security Training |
| Duration |
1 day (7 hours) |
| Pre-requisites |
Development experience with Visual Basic, C, C++, or Java.
|
|
|
|
| Courseware |
MS2805-MS (100 pages) |
| Price |
$395 |
| Notes |
|
This seminar introduces developers to the knowledge and skills required to identify and mitigate security threats. After completing this course, students will be able to implement threat modeling to analyze software vulnerabilities, recognize the threats of buffer overruns and how to avoid them, recognize the threats of canonicalization and how to avoid them, recognize the threats of SQL injection and how to avoid them, recognize the threats of cross-site scripting and how to avoid them,
recognize the threats of denial of service (DoS) attacks and how to avoid them, describe the intricacies and benefits of access control lists (ACLs), describe the complexities of storing secret information, execute code with least privilege, create secure Web sites, implement code access security in the .NET Framework, describe role-based security in the .NET Framework, determine security policy settings in the .NET Framework, encrypt and decrypt data with classes in the system, secure
ASP.NET applications and XML Web services, implement best practices for writing secure .NET code, describe
current security technologies and standards, specify the security technologies used in the Windows Server
System and secure software solutions built by using the Windows Server System.
The student kit contains additional materials including sample labs and white papers, and the Microsoft
Security Resource Kit compact disc.
Session I: "Writing Secure Code"
Common techniques that hackers use to compromise software systems
Buffer overruns
Cross-site scripting
SQL injection
Canonicalization issues
Cryptography hacking
COM safe for script issues
Denial of service attacks
Strategies that can mitigate these threats
Best practices that can mitigate these threats
Session II: "Security and the .NET Framework"
Security features of the Microsoft .NET Framework
.NET Framework security features
Implementing code access and role-based security
Cryptography
Securing Microsoft ASP.NET and XML Web services
Advanced Topics: Tips for Writing Secure .NET Code
Session III: "Developing Secure Applications with the Microsoft Windows Server System™"
Security features available with the Windows Server System
Overview of security concepts and Microsoft product features
Customized for specific audiences