| Details: |
Training Course Outline
Session 1
Config Authentication Configuration Settings Web.config File Windows Authentication
Authorization Web.config Example Anonymous Users Lock Config Settings, Configuring
IIS Settings Directory Security Anonymous Access Basic Authentication Digest
Authentication Integrated Authentication Secure Communications, Windows Authentication
Overview ProcessModel ASPNET Account Web.config Group Membership No Impersonation
Deny Access WindowsIdentity, Form-Based Authentication Overview Authentication
Cookie Persist Cookie Attributes Credentials Authenticate Method Log Off User.Identity,
Credential Storage Options Hashed Passwords Hashing Algorithms Test Hash Create
Hash XML File Userlist Server.MapPath Redirect
Session 2
Custom Authentication Overview SQL Server Logins WebUser Objects Salt Hashed
Passwords WebRoles Stored Procedures Permissions, Creating Custom Credentials
Overview Create User Add Roles Validate Name Store User Retrieve Roles, WebUsers
Class Overview Connection Strings Store User Information Return String Generate
Hash Add to Role Retrieve Data Validate Password, Start Custom Authentication
Web.config File Validate User Authorization Ticket Call Response.Redirect Authenticate
Request Populate Array Test CustomAuth Role Membership Code, Enterprise Services
COM+ Features Configured Components Component Services COM+ Security COM+ Roles
COM+ vs. CLR
Session 3
Create Serviced Components Overview Attributes Declaring Roles Methods Installing
in COM+ Manual Registration, Administering Security Application Security Application
Identity Component Permissions Test Permissions SQL Profiler Trace Using ComPlusAccount
Programmatic Security Imperative Security, .NET Remoting Features Overview Mobile/Remote
Objects Activation Modes Lifetime Management Server/Client Sharing Shared Assembly
Shared Interface Other Sharing Options, .NET Remoting Example Object Server
Application Create Channel Register Object Client Application Client Channel
References Test Application, Host Remoting in ASP.NET Choosing a Host IIS/ASP.NET
Create Web Application Web.config File Define Object HTTP Client Channel Startup
Properties
Session 4
Remoting Authentication Authentication Passing Credentials Hard Code User, Remoting
Authorization Web.config File Allow Users Test Authorization Principal Permission,
Web Services Introduction Overview View Code Namespace WebMethod StreamWriter
Client Form Client Form Code Permissions, Web Reference and Proxy Add Web Reference
Protocols Reference Parts Reference.vb, Disabling Protocols Overview Locking
Down HttpPost and HttpGet Override Settings Undo Changes, Web Services Authentication
Overview Directory Security Client Credentials PreAuthenticate NetworkCredential
Session 5
Web Services Authorization Specify User Wrong User Method Level Troubleshoot,
Deploying Security Policy Policy Configuration Policy Packages Deployment Options
Grant Full Trust Create Deployment Pkg, No Touch Deployment Overview Deploy
RichClient Adjust Security Policy Adjust Zone Security Reset Default Policies,
.NET Deployment Options Private Assemblies Shared Assemblies Assembly Versioning
Global Assembly Cache Install from GAC Uninstall from GAC, Deploy with Visual
Studio Create Setup Project Define Setup Project Create/Add Merge Module Create
Client Install Customize Setup Project Other Editors Finalize Project Install/Uninstall
Project, Deploy ASP.NET Applications Copy Project Web Setup Project Add Merge
Module Configure Security DeployWeb.msi, Cryptography Types Overview Symmetric
Cryptography Asymmetric Cryptography Symmetric/Asymmetric, Cryptography Types
(cont.) Symmetric Example Crypto Provider CryptoStream Decrypt Encryption/Decryption
Session 6
Create Key Files Test Encryption Public Key Code Add Private Key Convert to
Byte Arrays Encrypt Data Read Encrypted Text Decrypt Data, Hash Codes Features
Create Hash Array to Save Calculate Hash Verify Hash, Digital Signatures Overview
Not Verified Select File Calculate Hash Create Signature Verify Signature, Generating
Random Keys Forms Authentication machineKey Element Verify View State Generate
Key Generate Key Code Convert to String, Buffer Overflow Overview Generate Overflow
Unmanaged Code, SQL Injection Attacks Attack Example How It Works Attack Types
Stored Procedure SQL Injection Protection, Cross-Site Scripting Attack Overview
Example View Results Fixing the Code Closing Holes Keeping Current, The Human
Element Hackers Hacker Scenario Preventative Measures The Insiders |
