ASP NET - MOC 2300 - Developing Security-Enhanced Web Applications (1015884)

Inhalte

A. Introduction to Web Security

Why Build Security-Enhanced Web Applications? - Using the STRIDE Model to Determine Threats - Implementing Security: An Overview

B. Planning for Web Application Security

A Design Process for Building Security-Enhanced Web Applications

C. Validating User Input

User Input - Types of User Input Attacks - Performing Validation - Revealing as Little Information as Possible to the User

D. Internet Information Services Authentication

Introduction to Web Client Authentication - Configuring Access Permission for a Web Server - Selecting a Security-Enhanced Client Authentication Method - Running Services As an Authenticated User

E. Securing Web Pages

ASP Forms-Based Authentication - .NET Code Access and Role-Based Security - Overview of ASP.NET Authentication Methods - Working with Windows-Based Authentication in ASP.NET security - Working with ASP.NET Forms-Based Authentication

F. Securing File System Data

Overview of Securing Files - Windows Access Control - Creating ACLs Programmatically - Helping to Protect ASP.NET Web Application Files

G. Securing Microsoft SQL Server

SQL Server Connections and Security - SQL Server Role-Based Security - Securing SQL Server Communication - Preventing SQL Injection Attacks

H. Helping to Protect Communication Privacy and Data Integrity

Introduction to Cryptography - Working with Digital Certificates - Management - Using Secure Sockets Layer/Transport Layer Security Protocols - Using Internet Protocol Security

I. Encrypting, Hashing, and Signing Data

Encryption and Digital Signing Libraries - Using CAPICOM - Using System.Security.Cryptography Namespace to Hash Data - Using System.Security.Cryptography Namespace to Encrypt and Sign Data

J. Testing Web Applications for Security

Testing Security in a Web Application - Creating a Security Test Plan - Performing Security Testing