February 2008 - Posts

Securing IIS7 - Windows Server 2008 Security Guide

Windows Server 2008 Security Guide is out. It covers many crucial aspects but my favorite of course is IIS7 chapter: Chapter 6: Hardening Web Services This chapter provides prescriptive guidance for hardening the Web Server role. The chapter discusses Read More...

Posted 28 February 08 07:09 by alikl | 0 Comments   
Filed under Security, Deployment Phase, Deployment Inspection, IIS 7, Planning Phase

How To Consume WCF Using AJAX Without ASP.NET

How to consume WCF services directly from Html client? How to add AJAX-like functionally to application that does not natively support ASP.NET AJAX like classic ASP, ASP.NET 1.1, or PHP? WCF that ships with .Net 3.5 provides capability to consume it from Read More...

Posted 18 February 08 08:35 by alikl | 11 Comments   
Filed under WCF, Development Phase, Implementation, Performance, Planning Phase, AJAX

Performance Sin - Using Exceptions To Control Flow

Want to spot coding anti-patterns from performance perspective without actually looking in the code? One of the common performance coding anti-patterns I’ve noticed lately is using Exception Handling to control program flow. The anti-patterns Most Read More...

Posted 02 February 08 01:19 by alikl | 4 Comments   
Filed under Test Phase, Tools, Development Phase, Performance, Practices, Exception Handling

Search

This Blog

• Home
• Email

Tags

• Agile
• AJAX
• Auditing and Logging
• Authentication
• Authorization
• CardSpace
• CAS
• Code Inspection
• Consulting
• Deployment Inspection
• Deployment Phase
• Development Phase
• End User
• Exception Handling
• Fuzzing
• IIS 7
• Implementation
• Inception Phase
• Information Gathering
• Input Validation
• Interop
• Operations
• Performance
• Planning Phase
• Practices
• Reflection
• Security
• Sensitive Data
• SharePoint
• Test Phase
• Threading
• Threat Modeling
• Tools
• Video
• Vista
• VSTS
• WCF

Archives

• November 2008 (8)
• October 2008 (6)
• September 2008 (4)
• August 2008 (1)
• July 2008 (7)
• June 2008 (5)
• May 2008 (4)
• April 2008 (4)
• March 2008 (3)
• February 2008 (3)
• January 2008 (10)
• December 2007 (6)
• November 2007 (4)
• October 2007 (11)
• September 2007 (4)
• August 2007 (6)
• July 2007 (8)
• June 2007 (3)
• May 2007 (21)
• April 2007 (25)
• March 2007 (25)

. My Personal Blog .

• Practice This

.Net Performance How To's

• Improving .NET Application Performance and Scalability
• Exceptional Performance
• Performance Testing Guidance How-To's
• Fiddler PowerToy - Part 2: HTTP Performance
• Performance Testing with Fiddler
• Bottleneck-Detection Counters
• Troubleshooting Performance Problems in SQL Server 2005
• Performance Frame - v2

.Net Security How To's

• patterns & practices Security How To's Index
• ASP.NET 2.0 Security Questions and Answers
• Tamper detection
• Authentication Hub
• VSTS Resources
• Architecture and Design checklists
• Securing Sites with IP Address Restrictions
• WCF - XSD validation for WCF services
• WCF - Message Inspectors
• Using Credential Management in Windows XP and Windows Server 2003
• WCF - Common Security Scenarios
• WCF - Authorization
• Validating XML Data with XmlReader
• Input Validation - XML Data
• Validation - Web Client Software Factory
• patterns & practices WCF Security Application Scenarios
• Microsoft Identity and Access Management Series

Design Patterns

• data & object factory
• Yahho Design Pattern Library
• Sample .Net 3.0 app
• Application Architecture for .NET: Designing Applications and Services
• Litware HR - A Multitenant sample application
• Microsoft .NET Pet Shop 4.0
• Responsive Composite Web Client Reference Implementation
• Table of Contents: Introduction to CAB/SCSF
• ASP.NET Quickstarts
• Microsoft Identity and Access Management Series
• Software design patterns

Impactful

• Super Size Me
• Billy Eliot
• The Legend of 1900
• The Terminal
• The Counterfeiters

Lifecycle Phases

• 5. Deployment Phase
• 3. Development Phase
• 4. Test Phase
• 1. Inception Phase
• 2. Planning Phase

Popular

• My Favorite Shortcuts
• My Pipeline Is My Inbox
• Security .Net Code Inspection Using Outlook 2007
• Security Code Inspection - Eternal Search For SQL Injection
• .Net Assembly Spoof Attack
• Code Inspection - First Look For What To Look For
• How To Hack WCF - New Technology, Old Hacking Tricks
• Generate Documents Out Of Mail Items Directly From Outlook 2007
• ARCast With Ron Jacobs - Defending the Application
• How to Use Outlook 2007 RSS To Effectively Aggregate And Distill Information

Tools

• Fiddler2 Web Debugger - Freeware HTTP(S) debugging tool
• Microsoft Network Monitor 3
• FxCop Team Page
• Microsoft Threat Analysis & Modeling
• Windows Sysinternals tools
• Log Parser 2.2
• p&p Practices Checker - performance
• Microsoft ® Windows Server ™ 2003 Performance Advisor
• Ajax View
• WCat 6.3 (x86)
• Funnel Web Analyzer 5.0 for Windows

Syndication

• RSS 2.0
• Atom 1.0