Implementing Security for Applications Training Class

Lesson 1: Overview of Application Security

The Importance of Application Security
Application Security Best Practices

Lesson 2: Implementing Platform Security Best Practices

Security Best Practices for COM+, IIS, and SQL Server 2000
Using ACLs and DACLs
Using Windows Least-Privilege Accounts
Using Audit Trails
Implementing Platform Cryptography
Implementing Data Protection

Lesson 3: Implementing Coding Security Best Practices

Validating Application Input
Evaluating Canonicalization Issues
Using Security Exceptions

Lesson 4: Using .NET Framework Security Features

Implementing CLR Security Mechanism
Implementing Security Using Application Domains

Lesson 5: Implementing Role-based Security

Basics of Role-Based Security
Role-Based Security with Principal and Identity Objects
Role-Based Security with Permission Objects

Lesson 6: Implementing Code-Access Security

Overview of Code-Access Security
Performing Basic Security Operations
Performing Imperative Security Operations
Performing Declarative Security Operations
Adding Permission Requests

Lesson 7: Implementing Cryptography in .NET

Implementing Symmetric Cryptography
Implementing Asymmetric Cryptography

Lesson 8: Securing ASP.NET Applications

Implementing Authentication in ASP.NET Applications
Implementing Authorization in ASP.NET Applications
Implementing Impersonation in ASP.NET Applications
Securing Web Files and Folders

Lesson 9: Securing Remote .NET Applications

Introducing .NET Application Security
Implementing Authentication and Authorization in .NET Remoting Applications
Introducing Web Service Security
Implementing WS Securityq

Lesson 10: Configuring .NET Security

Managing Security Policies Using Mscorcfg.msc
Managing Security Policy Levels Using Mscorcfg.msc

Lesson 11: Implementing Security Testing

Overview of Security Testing
Creating a Security Test Plan
Performing Security Testing

Lesson 12: Deploying Applications with Security

Deploying .NET Applications with Security Settings
Deploying .NET Applications with Publisher Identity and Code Integrity