Mobile MOUSe.NET SECURITY FOR DEVELOPERS PART 2 ONLINE COURSE OUTLINE

Size: px

Start display at page:

Download "Mobile MOUSe.NET SECURITY FOR DEVELOPERS PART 2 ONLINE COURSE OUTLINE"

Robyn Reed
5 years ago
Views:

1 Mobile MOUSe.NET SECURITY FOR DEVELOPERS PART 2 ONLINE COURSE OUTLINE

2 COURSE TITLE.NET SECURITY FOR DEVELOPERS PART 2 COURSE DURATION 15 Hour(s) of Self-Paced Interactive Training COURSE OVERVIEW In the.net Security for Developers Part 2 course, expert instructors Andy Baron and Mary Chipman continue the instruction begun in Part 1. You ll learn about evaluating security risks and handling common threats, building secure web applications with ASP.NET, deploying and working with enterprise services (COM+), and using cryptography in.net. At the conclusion of this course, you ll be able to take advantage of the security features in the.net framework and understand security issues and threats that developers encounter. Prerequisites: Completion of.net Security for Developers Part 1 is highly recommended. BENEFITS Increase your earning potential and technical security credibility. Enhance employment opportunities with in-demand Internet security knowledge. This course will arm you with the latest technology on security issues. CONTACT Website : officeadmin@mobilemouse.com.au Telephone : Fax : PRICING Contact Mobile MOUSe for pricing. ADVANTAGES OF ONLINE COURSES Session times are at your discretion You can pick and choose which sessions to cover and in any order Learn at your own pace Free repetition (for a period of 6 months) Multiple course levels at a discounted price Many of the courses are internationally accredited Training from the comfort of your home or workstation Training can be accessed from any location

3 SESSION 1 Section A: Config Authentication Configuration Settings Web.config File Windows Authentication Authorization Web.config Example Anonymous Users Lock Config Settings Section B: Configuring IIS Settings Directory Security Anonymous Access Basic Authentication Digest Authentication Integrated Authentication Secure Communications Section C: Windows Authentication ProcessModel ASPNET Account Web.config Group Membership No Impersonation Deny Access WindowsIdentity Section D: Form-Based Authentication Authentication Cookie Persist Cookie Attributes Credentials Authenticate Method Log Off User.Identity Section E: Credential Storage Options Hashed Passwords Hashing Algorithms Test Hash Create Hash XML File Userlist Server.MapPath Redirect SESSION 2 Section A: Custom Authentication SQL Server Logins WebUser Objects Salt Hashed Passwords WebRoles Stored Procedures Permissions Section B: Creating Custom Credentials Create User Add Roles Validate Name Store User Retrieve Roles Section C: WebUsers Class Connection Strings Store User Information Return String Generate Hash Add to Role Retrieve Data Validate Password Section D: Start Custom Authentication Web.config File Validate User Authorization Ticket Call Response.Redirect Authenticate Request Populate Array Test CustomAuth Role Membership Code Section E: Enterprise Services COM+ Features Configured Components Component Services COM+ Security COM+ Roles COM+ vs. CLR 7/08/2012 PAGE 1

4 SESSION 3 Section A: Create Serviced Components Attributes Declaring Roles Methods Installing in COM+ Manual Registration Section B: Administering Security Application Security Application Identity Component Permissions Test Permissions SQL Profiler Trace Using ComPlusAccount Programmatic Security Imperative Security Section C:.NET Remoting Features Mobile/Remote Objects Activation Modes Lifetime Management Server/Client Sharing Shared Assembly Shared Interface Other Sharing Options Section D:.NET Remoting Example Object Server Application Create Channel Register Object Client Application Client Channel References Test Application Section E: Host Remoting in ASP.NET ChoosingHost IIS/ASP.NET Create Web Application Web.config File Define Object HTTP Client Channel Startup Properties SESSION 4 Section A: Remoting Authentication Authentication Passing Credentials Hard Code User Section B: Remoting Authorization Web.config File Allow Users Test Authorization Principal Permission Section C: Web Services Introduction View Code Namespace WebMethod StreamWriter Client Form Client Form Code Permissions Section D: Web ReferenceProxy Add Web Reference Protocols Reference Parts Reference.vb Section E: Disabling Protocols Locking Down HttpPostHttpGet Override Settings Undo Changes Section F: Web Services Authentication Directory Security Client Credentials PreAuthenticate NetworkCredential 7/08/2012 PAGE 2

SESSION 5 Section A: Web Services Authorization Specify User Wrong User Method Level Troubleshoot Section B: Deploying Security Policy Policy Configuration Policy Packages Deployment Options Grant

5 SESSION 5 Section A: Web Services Authorization Specify User Wrong User Method Level Troubleshoot Section B: Deploying Security Policy Policy Configuration Policy Packages Deployment Options Grant Full Trust Create Deployment Pkg Section C: No Touch Deployment Deploy RichClient Adjust Security Policy Adjust Zone Security Reset Default Policies Section D:.NET Deployment Options Private Assemblies Shared Assemblies Assembly Versioning Global Assembly Cache Install from GAC Uninstall from GAC Section E: Deploy with Visual Studio Create Setup Project Define Setup Project Create/Add Merge Module Create Client Install Customize Setup Project Other Editors Finalize Project Install/Uninstall Project Section F: Deploy ASP.NET Applications Copy Project Web Setup Project Add Merge Module Configure Security DeployWeb.msi Section G: Cryptography Types Symmetric Cryptography Asymmetric Cryptography Symmetric/Asymmetric Section H: Cryptography Types (cont.) Symmetric Example Crypto Provider CryptoStream Decrypt Encryption/Decryption SESSION 6 Section A: Asymmetric Cryptography Create Key Files Test Encryption Public Key Code Add Private Key Convert to Byte Arrays Encrypt Data Read Encrypted Text Decrypt Data Section B: Hash Codes Features Create Hash Array to Save Calculate Hash Verify Hash Section C: Digital Signatures Not Verified Select File Calculate Hash Create Signature Verify Signature Section D: Generating Random Keys Forms Authentication machinekey Element Verify View State Generate Key Generate Key Code Convert to String Section E: Buffer Overflow Generate Overflow Unmanaged Code Section F: SQL Injection Attacks Attack Example How It Works Attack Types Stored Procedure SQL Injection Protection Section G: Cross-Site Scripting Attack Example View Results Fixing the Code Closing Holes Keeping Current Section H: The Human Element Hackers Hacker Scenario Preventative Measures The Insiders 7/08/2012 PAGE 3

Mobile MOUSe XML.NET FOR DEVELOPERS ONLINE COURSE OUTLINE

Mobile MOUSe XML.NET FOR DEVELOPERS ONLINE COURSE OUTLINE COURSE TITLE XML.NET FOR DEVELOPERS COURSE DURATION 11 Hours of Interactive Training COURSE OVERVIEW Microsoft's.NET web services platform introduced