Browse by Tags

• Auditing and Logging
• Authentication
• Deployment Inspection
• Development Phase
• IIS 7
• Implementation
• Inception Phase
• Interop
• Performance
• Planning Phase
• Practices
• Security
• Sensitive Data
• Test Phase
• Tools
• Vista
• WCF

Use FREE Tools From IIS Resource Kit To Warm Up Your ASP.NET 1.1 Application By Batch Compilation

Have you noticed that when ASP.NET web application is accessed for the first time the response is slow? The reason for such behavior is batch compilation that occurs on the first hit. ASP.NET batch compilation is the process of compiling ASP.NET markup Read More...

Posted 20 July 08 06:24 by alikl | 5 Comments   
Filed under Test Phase, Implementation, Deployment Phase, Performance

Performance Sin - Chatty Database Access And Loops (Plus Another Free Performance Tool)

Chatty database access is the surefire way for slow performance caused by  resources starvation that might  even lead to denial of service. Following is a real world case. Customer Service Unavailable message is consistently observed when there Read More...

Posted 28 April 08 01:31 by alikl | 8 Comments   
Filed under Test Phase, Deployment Phase, Performance

Securing IIS7 - Windows Server 2008 Security Guide

Windows Server 2008 Security Guide is out. It covers many crucial aspects but my favorite of course is IIS7 chapter: Chapter 6: Hardening Web Services This chapter provides prescriptive guidance for hardening the Web Server role. The chapter discusses Read More...

Posted 28 February 08 07:09 by alikl | 1 Comments   
Filed under Security, Deployment Phase, Deployment Inspection, IIS 7, Planning Phase

ASP.NET 2.0 Internet Security Reference Implementation - Have It Handy

JD Meier writes in his blog : The ASP.NET 2.0 Internet Security Reference Implementation is a sample application complete with code and guidance. Our purpose was to show patterns & practices security guidance in the context of an application scenario. Read More...

Posted 21 November 07 10:04 by alikl | 4 Comments   
Filed under Security, Development Phase, Implementation, Deployment Phase, Practices, Inception Phase

Composite Application Block (CAB) Programming Essentials - Crucial For CAB Performance

Rich Newman posted awesome guides for Composite Application Block (CAB) programming: Table of Contents: Introduction to CAB/SCSF Part 1 Modules and Shells Part 2 WorkItems Part 3 Introduction to Dependency Injection Part 4 An Aside on Inversion of Control, Read More...

Posted 29 October 07 09:30 by alikl | 1 Comments   
Filed under Deployment Phase, Performance, Planning Phase

Examining WCF Diagnostic Traces Using Service Trace Viewer Tool (SvcTraceViewer.exe)

Service Trace Viewer Tool (SvcTraceViewer.exe) tool comes with Microsoft® Windows® Software Development Kit for Windows Vista™ and .NET Framework 3.0 Runtime Components . It allows to view WCF diagnostics traces in very convenient way. " Using Service Read More...

Posted 23 October 07 02:52 by alikl | 2 Comments   
Filed under WCF, Security, Tools, Deployment Phase, Auditing and Logging

Authentication And Identity Flow When ASP Page Consumes ASP.NET Web Service

"Classic" ASP has application isolation that is different from ASP.NET. Here is one of the real world scenarios where it might matter. There is a legacy web application written in ASP and hosted on Win2K3 box (IIS 6.0). It is of course in the process Read More...

Posted 05 September 07 05:04 by alikl | 4 Comments   
Filed under Security, Deployment Phase, Authentication, Planning Phase

Client Certificates Authentication - Dirty Trick To Disable CRL Check. For Demos Only!

My lab domain has MS CA installed in it so I am able to issue certificates to the left and to the right. Recently I spent some time to understand why client certificates authentication does not work. More precisely the certificates dialog box was offering Read More...

Posted 14 August 07 04:12 by alikl | 1 Comments   
Filed under Security, Deployment Phase, Authentication

Web Services Over SSL - Is It Really That Slow Like They Say?

My answer is "no" . I am working on solution where there is no Windows Active Directory Domain so we cannot utilize our beloved Kerberos and Windows Integrated Authentication saving big on configuration and management while taking advantage of increased Read More...

Posted 01 August 07 03:35 by alikl | 2 Comments   
Filed under Security, Development Phase, Implementation, Deployment Phase, Performance, Authentication, Planning Phase

Man-In-The-Middle-Attack: Protecting Http Traffic With SSL Might Be Not Enough - Consider Protecting SQL Traffic Too

Think configuring SSL for your web site is enough to protect against prying eyes? Here is how the sensitive data can be exposed by sniffing your SQL traffic. Consider common simple 3 tier web architecture for data driven web site. The Web and DB server Read More...

Posted 30 July 07 03:06 by alikl | 1 Comments   
Filed under Security, Implementation, Deployment Phase, Planning Phase

WCF Security In Intranet Scenario : Thoughts On Cons and Pros

I am researching on best practices with WCF security in terms of "YOU SHOUD" vs "YOU CAN". While it is great to have "How to" stuff I am also interested in "Why" angle. I have common simple scenario of WinForms client consuming WCF service inside corp Read More...

Posted 26 July 07 01:54 by alikl | 3 Comments   
Filed under WCF, Security, Implementation, Deployment Phase, Performance

Ubuntu And Apache Web Server Join My Lab Network

I have my lab network, my playground Active Directory Domain( more on it here - How I Setup Lab Domain Using VPC 2007 ). I have customers who explore on interoperability between .Net applications and Java application that run on Windows/Linux. They seek Read More...

Posted 09 July 07 08:44 by alikl | 1 Comments   
Filed under Development Phase, Deployment Phase, Interop

T-Shooting Kerberos

I was delivering "Authentication Explained" session for Security User Group. First off - thanks for attending the session! The session was based on "Authentication Explained" workshop . During the session I was demoing the following topics: Identity Flow Read More...

Posted 04 July 07 10:16 by alikl | 2 Comments   
Filed under Test Phase, Security, Implementation, Deployment Phase, Practices, Authentication

IIS 7 Configuration File - applicationHost.config - Password Management

From my learning of IIS7 I understand that IIS7's metabase is actually XML configuration file very familiar to me and similar to ASP.NET's web.config. It is called applicationHost.config and sits in C:\Windows\System32\inetsrv\config My first interest Read More...

Posted 24 April 07 08:52 by alikl | 0 Comments   
Filed under Security, Sensitive Data, Deployment Phase, IIS 7

IIS 6.0 Was True Love, New Romance Is About To Begin - IIS 7

I just could not hold it back - it is midnight and I am watching Richard Turner's screencast - New Screencast: How to configure IIS7 for Windows CardSpace sites It was humiliatingly :) easy to set up test server cert, so I've done it, here is the prove: Read More...

Posted 07 April 07 10:01 by alikl | 6 Comments   
Filed under Security, Deployment Phase, Vista, IIS 7

Search

This Blog

• Home
• Email