Browse by Tags

• Auditing and Logging
• Deployment Phase
• Development Phase
• Fuzzing
• Implementation
• Input Validation
• Performance
• Practices
• Test Phase
• Tools

patterns & practices Improving Web Services Security: Scenarios and Implementation Guidance for WCF - BETA Is Out

patterns & practices team has just released a beta version of WCF Security Guide on Codeplex. Download the guide at http://www.codeplex.com/WCFSecurityGuide . Original announcement by J.D. Meier, the man behind the effort, is here - New Release: patterns Read More...

Posted 05 June 08 04:57 by alikl | 1 Comments   
Filed under WCF, Security, Practices

WCF Security - Input/Data Validation Using Schemas

WCF offers very flexible approach of Input and Data Validation based on XML Schemas. The approach is flexible since the validation rules are expressed in form of XML schema and can be changed at any time without recompiling the solution. I followed the Read More...

Posted 25 May 08 03:52 by alikl | 1 Comments   
Filed under WCF, Input Validation, Security, Development Phase, Implementation

WCF Security - Input/Data Validation Sample Visual Studio Project

Input and Data Validation is one of the core security principles . WCF is no exception . To get most out of WCF in secure way one must implement proper Input and Data Validation. I was following instructions on How To – Perform Input Validation Read More...

Posted 25 May 08 12:17 by alikl | 1 Comments   
Filed under WCF, Input Validation, Security, Development Phase, Implementation

patterns & practices WCF Security Guidance Project - live on Codeplex

patterns & practices has recently released WCF Security Guidance Project . JD , the program manager behind the effort, has been blogging about it too.It is evolving project but the initial content is fantastic already. It has Application Scenarios Read More...

Posted 02 April 08 08:53 by alikl | 1 Comments   
Filed under WCF, Security, Development Phase, Implementation, Practices

Examining WCF Diagnostic Traces Using Service Trace Viewer Tool (SvcTraceViewer.exe)

Service Trace Viewer Tool (SvcTraceViewer.exe) tool comes with Microsoft® Windows® Software Development Kit for Windows Vista™ and .NET Framework 3.0 Runtime Components . It allows to view WCF diagnostics traces in very convenient way. " Using Service Read More...

Posted 23 October 07 02:52 by alikl | 2 Comments   
Filed under WCF, Security, Tools, Deployment Phase, Auditing and Logging

WCF Security In Intranet Scenario : Thoughts On Cons and Pros

I am researching on best practices with WCF security in terms of "YOU SHOUD" vs "YOU CAN". While it is great to have "How to" stuff I am also interested in "Why" angle. I have common simple scenario of WinForms client consuming WCF service inside corp Read More...

Posted 26 July 07 01:54 by alikl | 3 Comments   
Filed under WCF, Security, Implementation, Deployment Phase, Performance

How To Hack WCF - New Technology, Old Hacking Tricks

First of I'd like to thank Guy for his excellent screencast - very convenient, so thanks. Specifically I liked introductory screencast for WCF which can be found here: http://blogs.microsoft.co.il/blogs/bursteg/pages/WCF-Introduction-Demo-_2800_ScreenCast_2900_.aspx Read More...

Posted 04 March 07 08:11 by alikl | 12 Comments   
Filed under WCF, Input Validation, Test Phase, Fuzzing, Security

Search

This Blog

• Home
• Email