This one-day instructor-led clinic provides students with knowledge and skills
essential for the creation of applications with enhanced security. Students will
learn about the need for implementing security at every stage of the development
process and best practices for applying security principles. Students will also
learn how to use established threat modeling methodologies and tools with other
best practices to minimize vulnerabilities and limit damage from attacks.
Finally, students will learn how to implement security features to enhance
security for Web applications and Web services that are built by using Microsoft
ASP.NET.
What you will learn
After completing this course, students will be able to:
Understand the historical implications of Trustworthy
Computing.
Identify potentially hostile applications.
Identify common types of attacks.
Understand the consequences of poor security.
Recognize examples of security intrusions.
Identify challenges involved in implementing security.
Understand the need for process improvement throughout the development
process.
Describe the security framework.
Understand the secure product development timeline.
Describe the principles of designing with security in mind.
Understand the importance of data security.
Identify threat scenarios.
Target potential sources of threats.
Describe common types of attacks.
Describe Microsoft .NET Framework security features.
Explain how code access security works.
Explain how role-based security works.
Explain how to use cryptography to sign and verify data.
Enhance security for ASP.NET Web applications.
Enhance security for ASP.NET Web services.
Apply appropriate tips for writing secure code with the .NET Framework.
Prerequisites
Before attending this course, students must have:
Development experience with Microsoft Visual Basic, Microsoft Visual C++, or
C#
Experience building Microsoft Windows or Web applications using the .NET
Framework
Audience
Attendees will be professional developers who are responsible for designing
and developing applications, components, clients, or back-end data services
written in Microsoft Visual Basic, Microsoft Visual C++, or C#.