Implementing Security For Applications Course

• Should have a minimum of 1 year of experience using Microsoft Visual Studio® .NET 2003 (.NET Framework 1.1) and 2-3 years of additional development experience.
• Should be experienced in either Visual Basic .NET or Visual C#.

Topics covered on the 5 day Implementing Security For Applications course

Overview of Application Security

• The Importance of Application Security
• Application Security Best Practices

Implementing Platform Security Best Practices

• Security Best Practices for COM+, IIS, and SQL Server 2000
• Using ACLs and DACLs
• Using Windows Least-Privilege Accounts
• Using Audit Trails
• Implementing Platform Cryptography
• Implementing Data Protection

Implementing Coding Security Best Practices

• Validating Application Input
• Evaluating Canonicalization Issues
• Using Security Exceptions

Using .NET Framework Security Features

• Implementing CLR Security Mechanism
• Implementing Security Using Application Domains

Implementing Role-based Security

• Basics of Role-Based Security
• Role-Based Security with Principal and Identity Objects
• Role-Based Security with Permission Objects

Implementing Code-Access Security

• Overview of Code-Access Security
• Performing Basic Security Operations
• Performing Imperative Security Operations
• Performing Declarative Security Operations
• Adding Permission Requests

Implementing Cryptography in .NET

• Implementing Symmetric Cryptography
• Implementing Asymmetric Cryptography

Securing ASP.NET Applications

• Implementing Authentication in ASP.NET Applications
• Implementing Authorization in ASP.NET Applications
• Implementing Impersonation in ASP.NET Applications
• Securing Web Files and Folders

Securing Remote .NET Applications

• Introducing .NET Application Security
• Implementing Authentication and Authorization in .NET Remoting Applications
• Introducing Web Service Security
• Implementing WS Security

Configuring .NET Security

• Managing Security Policies Using Mscorcfg.msc
• Managing Security Policy Levels Using Mscorcfg.msc

Implementing Security Testing

• Overview of Security Testing
• Creating a Security Test Plan
• Performing Security Testing

Deploying Applications with Security

• Deploying .NET Applications with Security Settings
• Deploying .NET Applications with Publisher Identity and Code Integrity