Certified Secured .NET Developer(CSDD) |
| Certified Secured .NET Developer(CSDD) |
The course will present security guidelines and considerations in .NET applications development. The participants will learn the basics of application security, how to enforce security on a .NET application, using .NET crypto API and other security related issues. In addition, the course presents an overview of .NET's Security Framework, including authentication and authorization implementation.
|
| Objectives of the course |
Upon completion of this course, participants will be able to:
- Understand the need for security
- Understand the security threats
- Implement code security best practices
- Implement role based security
- Improve security of ASP.NET Applications
|
| Who should attend this course? |
- .NET developers wishing to improve their security skills
|
| Course Contents |
|
Session One: Overview of Application Security
- Module 1: Importance of Application Security
- Module 2: Owasp Top Ten
- Module 3: Application Security Best Practices
|
|
Session Two: Implementing Platform Best Practices
- Module 4: Security Best Practices For Com+, SQL Server
- Module 4.1: Service Account Selection and Management
- Module 4.2: Authentication Mode
- Module 5: Implementing Data Protection
|
|
Session Three: Implementing Coding security Best Practices
- Module 6: Validating Application Input
- Module 7: Evaluating Canonicalization Issues
|
|
Session Four: Using .NET Framework Security Features
- Module 8: Implementing CLR Security Mechanism
|
|
Session Five: Implementing Role Based Security
- Module 9: Basic Role Based Security
- Module 10: Role Based Security with Principal and Identity Objects
- Module 11: Role Based Security with Permission Objects
|
|
Session Six: Implementing Code - Access Security
- Module 12: Overview of Code Access Security
- Module 13: Basic Security Operations
- Module 14: Adding Permission Requests
|
|
Session Seven: Implementing Cryptography in .NET
- Module 15: Implementing Symmetric Cryptography
- Module 16: Implementing Asymmetric Cryptography
|
|
Session Eight: Securing ASP.NET Applications
- Module 17: Implementing Authentication in ASP.NET Application
- Module 18: Implementing Authorization in ASP.NET Application
- Module 19: Implementing Impersonation in ASP.NET Application
- Module 20: Securing Web Files and Folders
|
|
Session nine: Securing Remote .NET Application
- Module 21: Introducing .NET Application Security
- Module 22: Implementing Authentication and Authorization in .NET Remote Applications
- Module 23: Introducing Web Service Security
|
|
Session Ten: Configuring .NET Security
- Module 24: Managing Security Policies
- Module 25: Managing Security Policy Levels
|
|
Session Eleven: Deploying Applications with Security
- Module 26: Deploying .NET Applications with Security Settings.
|
