Microsoft Security Guidance Training for Developers II Training Class

Microsoft Security Guidance Training for Developers II Training Seminar

Overview:
This clinic provides students with knowledge and skills essential for the creation of applications with enhanced security. Students learn about implementing security during the development process and best practices for applying security principles.

Who Should Attend:
This clinic is intended for developers with experience using current .NET development languages and Microsoft Visual Studio?? .NET as their development environment. Most developers in this audience will have at least one to two years of experience.

At Course Completion:
After completing this clinic, students will be able to: - Apply best practices to build security into the design, development, testing, and deployment and maintenance phases of the software development life cycle. This includes: - Describing a common development life cycle. - Describing ways to build security into the design phase and describing best practices for applying security in the design phase. - Describing ways to build security into the development phase and describing coding guidelines for applying security into the development phase. - Describing ways to build security into the testing phase. - Describing ways to build security into the deployment and maintenance phase. - Apply security best practices and enhancements throughout intranet solutions development. This includes: - Describing security threats that apply to intranet applications. - Applying the Microsoft .NET Framework application programming interfaces (APIs) for data encryption. - Describing the process for designing an application access-management strategy. - Describing the authentication options for intranet applications. - Describing the authorization options for intranet applications. - Apply security best practices and enhancements to Internet and extranet solutions. This includes: - Describing common security threats to Internet applications. - Describing the two common mechanisms for securing communication: virtual private networking (VPN) and Secure Sockets Layer (SSL). - Choosing an appropriate authentication mechanism for your application. - Describing the process of forms-based authentication. - Describing the security specifications for Web services. - Apply mobile device security best practices when building software solutions for Windows Mobile environments. This includes: - Describing security threats to mobile applications. - Describing device security best practices. - Describing the mobile security architecture for connected applications. - Describing strategies for security communication in mobile devices. - Encrypting data on a mobile device.