.NET Security Training
This course delivers comprehensive coverage of .NET Security and provides a foundation of the various security APIs contained within the .NET 2.0 base class libraries. It examines how strong naming, obfuscation and digital certificates can prevent others from tampering with and modifying the content within a .NET assembly. The content addresses the role of one-way encryption, Role Based Security and Code Access Security to assign identities and permissions to users and executing assemblies. The course examines numerous topics regarding securing ASP .NET web applications and XML web services.
- Cost: Price on application
- Duration: 3 days
- This course is not available as part of our public schedule but can be provided on a customised client specific basis.
Participants need to have experience of programming in .NET
Review the composition of .NET assemblies
Understand the role of Applications Domains
Define `roundtrip engineering`
Learn to protect assemblies from tampering using strong names
Understand the role of obfuscation
Understand the role of publisher certificates
Understand the role of FxCop.exe
Define the role of cryptographic services
Understand the role of hash algorithms and hash codes
Generate hashed data using the .NET framework
Validate hash codes programmatically
Understand the role of encryption and decryption
Learn to encrypt data symmetrically
Learn to encrypt data asymmetrically
Understand the use of role based security
Create and administer roles
Distinguish between principals, identity and roles
Programmatically determine role membership
Restrict actions based on roles
Understand the motivation behind Code Access Security (CAS)
Understand the building blocks of CAS
Use CAS to secure ClickOnce Applications
Programmatically interact with CAS
Undertand the role of Isolated Storage
Understand the levels of isolated Storage
Investigate the System.IO.IsolatedStorage namespace
Administer isolated storage using storeadm.exe
Programmatically manipulate isolated storage
Examine the Architecture of ASP .NET Security
Contrast Windows based and Forms based authentication
Configure ASP .NET authentication and authorization using a web.config file
Work with the ASP .NET security controls
Briefly review the construction of .NET XML Web Services
Understand the role of Web Services Extensions (WSE) 3.0
Walkthrough the process of obtaining / installing WSE 3.0
Understand the scope of Microsoft.Web.Services3.dll
Examine how to authenticate users using WS-Security