MS2806 Microsoft Security Guidance Training for Developers

Session 1: Essentials of Application Security

This session provides the knowledge and skills essential for the creation of applications with enhanced security. The session covers important security concepts and the need for implementing security at every stage of the development process. Additionally, this session discusses how to use various security technologies to increase data and communications security and describes the security enhancements included with Windows XP Service Pack 2.

Topics

Session 2: Writing Secure Code – Best Practices

This session identifies best practices for applying security principles throughout the development process. The session also describes established threat modeling methodologies and tools and how they can be applied with other best practices to minimize vulnerabilities and limit damage from attacks.

Topics

Session 3: Writing Secure Code – Threat Defense

This session builds upon existing knowledge of secure coding best practices and threat modeling to identify a variety of threat scenarios. The session covers effective strategies for defending common security threats such as buffer overruns, cross-site scripting, SQL injection, and denial of service attacks.

Topics

Session 4: Implementing Application Security Using the .NET Framework

This session describes how to implement additional security features for applications that are built on the .NET Framework. The session describes how to use both code access security and role-based security to limit vulnerabilities and how to use the cryptographic provider support in the .NET Framework to encrypt and sign data. In addition, the session explains how to secure Web applications and Web services that are built by using ASP.NET.

Topics

About Microsoft Clinics

Microsoft Official Clinic learning products provide students with technical information on Microsoft products or technologies while discussing real-world considerations for their implementation. Clinics highlight features and functionality through product demonstrations.