Objectives: This course covers basics of application security, how to enforce security on a .NET application, using .NET crypto API & other security related issues.

Language: english

Course lessons: Importance of Application Security, OWASP Top Ten, Application Security Best Practices, Security Best Practices for Com+, SQL Server, Service Account Selection and Management , Authentication Mode, Implementing Data Protection, Validating Application Input, Evaluating Canonicalization Issues, Implementing CLR Security Mechanism , Basic Role Based Security, Role Based Security with Principal and Identity Objects, Role Based Security with Permission Objects, Overview of Code Access Security, Basic Security Operations, Adding Permission Requests, Implementing Symmetric Cryptography, Implementing Asymmetric Cryptography, Implementing Authentication in ASP.NET Application, Implementing Authorization in ASP.NET Application, Implementing Impersonation in ASP.NET Application, Securing Web Files and Folders, Introducing .NET Application Security, Implementing Authentication an d Authorization in .NET Remote Applications, Introducing Web Service Security, Managing Security Policies, Managing Security Policy Levels, Deploying .NET Application with appropriate Security Settings