Browse by Tags

• Auditing and Logging
• Authentication
• Deployment Phase
• Development Phase
• Inception Phase
• Security
• Test Phase
• Tools
• WCF

patterns & practices WCF Security Guidance Project - live on Codeplex

patterns & practices has recently released WCF Security Guidance Project . JD , the program manager behind the effort, has been blogging about it too.It is evolving project but the initial content is fantastic already. It has Application Scenarios Read More...

Posted 02 April 08 08:53 by alikl | 0 Comments   
Filed under WCF, Security, Development Phase, Implementation, Practices

ASP.NET 2.0 Internet Security Reference Implementation - Have It Handy

JD Meier writes in his blog : The ASP.NET 2.0 Internet Security Reference Implementation is a sample application complete with code and guidance. Our purpose was to show patterns & practices security guidance in the context of an application scenario. Read More...

Posted 21 November 07 10:04 by alikl | 4 Comments   
Filed under Security, Development Phase, Implementation, Deployment Phase, Practices, Inception Phase

Use Sysinternals DebugView To Diagnose The Application

"Unspecified error", "Catastrophic failure", "Object reference not set to an instance of an object" and other "self explanatory" errors promise no easy debugging. Good instrumentation of the application to the rescue! The techniques described in the paper Read More...

Posted 16 July 07 06:42 by alikl | 7 Comments   
Filed under Tools, Development Phase, Implementation, Practices, Auditing and Logging

T-Shooting Kerberos

I was delivering "Authentication Explained" session for Security User Group. First off - thanks for attending the session! The session was based on "Authentication Explained" workshop . During the session I was demoing the following topics: Identity Flow Read More...

Posted 04 July 07 10:16 by alikl | 2 Comments   
Filed under Test Phase, Security, Implementation, Deployment Phase, Practices, Authentication

Search

This Blog

• Home
• Email

Tags

• Agile
• AJAX
• Auditing and Logging
• Authentication
• Authorization
• CardSpace
• CAS
• Code Inspection
• Consulting
• Deployment Inspection
• Deployment Phase
• Development Phase
• End User
• Exception Handling
• Fuzzing
• IIS 7
• Implementation
• Inception Phase
• Information Gathering
• Input Validation
• Interop
• Operations
• Performance
• Planning Phase
• Practices
• Reflection
• Security
• Sensitive Data
• SharePoint
• Test Phase
• Threading
• Threat Modeling
• Tools
• Video
• Vista
• VSTS
• WCF

Archives

• November 2008 (8)
• October 2008 (6)
• September 2008 (4)
• August 2008 (1)
• July 2008 (7)
• June 2008 (5)
• May 2008 (4)
• April 2008 (4)
• March 2008 (3)
• February 2008 (3)
• January 2008 (10)
• December 2007 (6)
• November 2007 (4)
• October 2007 (11)
• September 2007 (4)
• August 2007 (6)
• July 2007 (8)
• June 2007 (3)
• May 2007 (21)
• April 2007 (25)
• March 2007 (25)

. My Personal Blog .

• Practice This

.Net Performance How To's

• Improving .NET Application Performance and Scalability
• Exceptional Performance
• Performance Testing Guidance How-To's
• Fiddler PowerToy - Part 2: HTTP Performance
• Performance Testing with Fiddler
• Bottleneck-Detection Counters
• Troubleshooting Performance Problems in SQL Server 2005
• Performance Frame - v2

.Net Security How To's

• patterns & practices Security How To's Index
• ASP.NET 2.0 Security Questions and Answers
• Tamper detection
• Authentication Hub
• VSTS Resources
• Architecture and Design checklists
• Securing Sites with IP Address Restrictions
• WCF - XSD validation for WCF services
• WCF - Message Inspectors
• Using Credential Management in Windows XP and Windows Server 2003
• WCF - Common Security Scenarios
• WCF - Authorization
• Validating XML Data with XmlReader
• Input Validation - XML Data
• Validation - Web Client Software Factory
• patterns & practices WCF Security Application Scenarios
• Microsoft Identity and Access Management Series

Design Patterns

• data & object factory
• Yahho Design Pattern Library
• Sample .Net 3.0 app
• Application Architecture for .NET: Designing Applications and Services
• Litware HR - A Multitenant sample application
• Microsoft .NET Pet Shop 4.0
• Responsive Composite Web Client Reference Implementation
• Table of Contents: Introduction to CAB/SCSF
• ASP.NET Quickstarts
• Microsoft Identity and Access Management Series
• Software design patterns

Impactful

• Super Size Me
• Billy Eliot
• The Legend of 1900
• The Terminal
• The Counterfeiters

Lifecycle Phases

• 5. Deployment Phase
• 3. Development Phase
• 4. Test Phase
• 1. Inception Phase
• 2. Planning Phase

Popular

• My Favorite Shortcuts
• My Pipeline Is My Inbox
• Security .Net Code Inspection Using Outlook 2007
• Security Code Inspection - Eternal Search For SQL Injection
• .Net Assembly Spoof Attack
• Code Inspection - First Look For What To Look For
• How To Hack WCF - New Technology, Old Hacking Tricks
• Generate Documents Out Of Mail Items Directly From Outlook 2007
• ARCast With Ron Jacobs - Defending the Application
• How to Use Outlook 2007 RSS To Effectively Aggregate And Distill Information

Tools

• Fiddler2 Web Debugger - Freeware HTTP(S) debugging tool
• Microsoft Network Monitor 3
• FxCop Team Page
• Microsoft Threat Analysis & Modeling
• Windows Sysinternals tools
• Log Parser 2.2
• p&p Practices Checker - performance
• Microsoft ® Windows Server ™ 2003 Performance Advisor
• Ajax View
• WCat 6.3 (x86)
• Funnel Web Analyzer 5.0 for Windows

Syndication

• RSS 2.0
• Atom 1.0