www.jbinternational.co.uk sales@jbinternational.co.uk Call Free 0800 028 6400

JB International 1345 High Road London, N20 9HR +44 (0) 20 8446 7555

 

Secure coding with .NET 2.0

Dates and full course list

Secure coding with .NET 2.0 Training Course Overview

Course Code:	NET0060
Price:	£1395
Duration:	3 Days - custom / on-site options available - please call.
Date:
Who should attend:	.NET Developers who need to ensure their applications are as secure as possible through developing and testing robust, secure code
Prerequisite Skills:	Experience of programming in a .NET Language (e.g. C# / VB.NET)

This course will provide delegates with a sound understanding of modern day requirements for building secure applications from the ground up, by looking at the Secure Development Lifecycle, and using sound Testing and Documentation techniques.

Course Content

Our hands-on .NET Security training course has been developed for real-world, commercial scenarios by our expert instructors. See below for detailed syllabus, or if you have a technical question, please email

What you will learn

At the end of this course delegates will be able to:

1. Security Principles
2. SD3
3. A rich list of security techniques
4. Writing secure .net code
5. How to test security
6. How to build privacy into you application
7. How to secure installations
8. How to write secure documentation and error messages.

Secure coding with .NET 2.0 Training Course Outline

Security Overview

The Need for Secure Systems
Trustworthy Computing
Proactive Security Development
SD 3 : Secure by Design, by Default, and in Deployment
Security Principles
Threat Modelling

Security Techniques

Preventing Buffer Overruns
Determining Appropriate Access Control
Running with Least Privilege
Cryptographic Techniques
Protecting Secret Data
Guarding against Input
Canonical Representation Issues
Database Input Issues
Web-Specific Input Issues
Internationalization Issues
Socket Security
Securing RPC, ActiveX Controls, and DCOM
Protecting Against Denial of Service Attacks

Writing Secure .NET Code

Code Access Security Overview
Using FxCop
Strong-Named Assemblies
Specifying Assembly Permission Requirements
Use of Assert
Demands and Link Demands
Limiting Who Uses Your Code
XML and Configuration Files
Partial Trust Assemblies
Issues with Delegates
Issues with Serialization
The Role of Isolated Storage
Tracing and Debugging
General Good Practices

Security Testing

The Role of the Security Tester
Building Security Test Plans from a Threat Model
Testing Clients with Rogue Servers
Determining Attack Surface
Performing a Security Code Review

Secure Software Installation

Principle of Least Privilege
Using the Security Configuration Editor
Low-Level Security APIs

Building Privacy into Your Application

Malicious vs. Annoying Invasions of Privacy
Major Privacy Legislation
Privacy vs. Security
Building a Privacy Infrastructure
Designing Privacy-Aware Applications

Writing Security Documentation and Error Messages

Security Issues in Documentation
Security Issues in Error Messages
Information Disclosure Issues
Security Usability

Associated Courses

.NET 3.0 Windows Presentation Foundation - WPF Training Course
.NET 3.0 Windows Communication Foundation - WCF Training Course
.NET 3.0 Windows Workflow Foundation - WF Training Course
Silverlight Training Course
.NET 3.0 Technology Overview
XAML Training Course
ASP.NET3.5 Training Course with Visual Studio 2008, ASP.NET AJAX, and Silverlight
C# .NET 3.0 Programming Training Course (C#3 Training Course)
Visual Basic 9.0 Programming Training Course (VB9 Training Course)
ASP.NET 2.0 training course
Advanced ASP.NET 2.0 with AJAX training course
Creating Commercial Server Controls with ASP.NET2.0
.NET 2.0 Programming with C# and VB.NET
.NET 2.0 Multi-threaded Programming with C# and VB.NET
for dual-core / multi-core / multiprocessor systems training
.NET (dotnet) Design Patterns & Architecture Training UK
Secure coding with .NET
Testing with Visual Studio .NET Team System Training UK
C#.NET 2.0 Smart Device Development with .NET Compact Framework Training UK
Visual Studio .NET 2005 training
.NET Framework 2.0 Training
.Net Seminar - Overview for managers and developers
SharePoint 2003 Applications Development Training UK
SharePoint 2007 Applications Development Training UK
BizTalk Server 2006 Training UK
BizTalk Server 2004 Training UK
C++ ProgrammingTraining UK