Alik Levin's
Consulting - Stories from Trenches, Case Studies, and Tech Notes
Browse by Tags
All Tags
»
Test Phase
(RSS)
AJAX
Authentication
Authorization
CAS
Code Inspection
Deployment Phase
Development Phase
End User
Exception Handling
Fuzzing
Implementation
Information Gathering
Input Validation
Performance
Planning Phase
Practices
Reflection
Security
Sensitive Data
Tools
VSTS
WCF
How To Generate Unit Test Using WCF Load Test – Quick Steps
This is quick summary of steps for creating WCF Unit Tests using WCF Load Test available for free on Codeplex. This quick summary created based on the Lab materials that ship with the tool . Quick Resource Box WCF Load Test Summary
Read More...
DebugView - Free Simple Tool To Quickly Identify Performance Problems
DebugView is well known free tool from Systinternals (Microsoft) . Vast majority of developers is aware of its existence. Nevertheless, I've decided to write this post following my practice of journaling my technical accomplishments
Read More...
ASP.NET Performance: Dynamically Loaded Assemblies Cause Application Recycles (Problem and Solution)
In my speak - dynamically loaded assemblies are those assemblies that were compiled during run time dynamically via CodeProvider like CSharpCodeProvider directly or by using types that use this class internally. Assemblies that
Read More...
ASP.NET Data Binding Performance – Collection Is More Expensive Than Datatable
In my previous post - Best ASP.NET Performance Winner For Data Binding - Hands Up To Response.Write() – I’ve conducted several simple performance tests for data binding to GridView in ASP.NET page. What surprised me most is that eliminating massive loops
Read More...
Best ASP.NET Performance Winner For Data Binding - Hands Up To Response.Write()
To achieve best performance you need to make decisions based on trade-off between coolness, coding productivity, and personal engineering values. I never thought I would be recommending my customer considering using old fashion
Read More...
Security Code Review – String Search Patterns For Authorization Vulnerabilities
These are the questions and the search criteria I use to identify authorization vulnerabilities in the code beyond web.config <authorization> node. How does the code protect access to page classes? Attributes Search for PrincipalPermission attributes.
Read More...
Security Code Review – String Search Patterns For Authentication Vulnerabilities
This post contains string search patterns that can help identifying authentication vulnerabilities during security code inspection for your ASP.NET application . Most common vulnerability is about insecurely manipulating credentials in the code. The question
Read More...
Use FREE Tools From IIS Resource Kit To Warm Up Your ASP.NET 1.1 Application By Batch Compilation
Have you noticed that when ASP.NET web application is accessed for the first time the response is slow? The reason for such behavior is batch compilation that occurs on the first hit. ASP.NET batch compilation is the process of compiling ASP.NET markup
Read More...
Security Code Review – String Search Patterns For Finding Input Validation Vulnerabilities
Well defined set of search patterns helps significantly reduce time (cost) when performing security code inspections. This post focuses on input validation vulnerabilities commonly found in ASP.NET web applications. SQL Injection and Cross Site Scripting
Read More...
ASP.NET Performance Sin - Serving Images Dynamically (Or Another Reason To Love Fiddler)
Serving images dynamically may cause performance hit. Dynamically served images require more HTTP requests which violates Steve Souders' performance rule #1 - Make Fewer HTTP Requests . The latency is also caused by parallelism (or parallel downloading)
Read More...
Performance Sin - Chatty Database Access And Loops (Plus Another Free Performance Tool)
Chatty database access is the surefire way for slow performance caused by resources starvation that might even lead to denial of service. Following is a real world case. Customer Service Unavailable message is consistently observed when there
Read More...
Free Performance Tool - Analyze IIS Logs Like A Pro With Funnel Web Analyzer
These free performance tools will save you time and money identifying performance bottlenecks. Your customers will thank you for building fast and responsive applications. Funnel Web Analyzer 5.0 for Windows Download the tool here. Analyzer gives insight
Read More...
Quickly Find And Fix Cross Site Scripting (XSS) Vulnerabilities In Your ASP.NET Application.
Want to quickly check your ASP.NET Web application for Cross Site Scripting (XSS) vulnerability ? It is pretty easy with the knowledge and tools you already have. This post describes how to quickly find and fix most of XSS vulnerabilities in your code.
Read More...
Stress Test ASP.NET Web Application With Free WCAT Tool
Building ASP.NET web applications? Plan to serve thousands of users? Would you like to see how your application would behave [misbehave] under stress? Use simple-to-use and freely available WCAT tool to generate the load and get detailed report for expected
Read More...
Performance Sin - Using Exceptions To Control Flow
Want to spot coding anti-patterns from performance perspective without actually looking in the code? One of the common performance coding anti-patterns I’ve noticed lately is using Exception Handling to control program flow. The anti-patterns Most
Read More...
More Posts
Next page »
Search
This Blog
Home
Email
Twitter Updates
follow me on Twitter
Books I recommend
The 22 Immutable Laws of Branding
The 21 Irrefutable Laws of Leadership: Follow Them and People Will Follow You
The 4-Hour Workweek: Escape 9-5, Live Anywhere, and Join the New Rich
Raving Fans: A Revolutionary Approach To Customer Service
The Tipping Point: How Little Things Can Make a Big Difference
The Leadership Pill: The Missing Ingredient in Motivating People Today
The Handbook of Emotionally Intelligent Leadership: Inspiring Others to Achieve Results
The Power of Full Engagement: Managing Energy, Not Time, is the Key to High Performance and Personal Renewal
Overachievement: The New Model for Exceptional Performance
The Dream Manager
Swim with the Sharks Without Being Eaten Alive: Outsell, Outmanage, Outmotivate, and Outnegotiate Your Competition
Weinberg on Writing: The Fieldstone Method
Gemba Kaizen: A Commonsense, Low-Cost Approach to Management
The One Minute Manager
Kaizen: The Key To Japan’s Competitive Success
Secrets of Consulting: A Guide to Giving and Getting Advice Successfully
The Dip: A Little Book That Teaches You When to Quit (and When to Stick)
Tags
Agile
AJAX
Application Lifecycle Management
Architecture
Auditing and Logging
Authentication
Authorization
Azure
CardSpace
CAS
Code Inspection
Consulting
Deployment Inspection
Deployment Phase
Development Phase
End User
Exception Handling
Fuzzing
IIS 7
Implementation
Inception Phase
Information Gathering
Input Validation
Interop
MVC
Operations
Performance
Planning Phase
Practices
Reflection
Security
Sensitive Data
SharePoint
Test Phase
Threading
Threat Modeling
Tools
Video
Vista
VSTS
WCF
Archives
June 2009 (4)
May 2009 (4)
April 2009 (2)
March 2009 (7)
February 2009 (8)
December 2008 (2)
November 2008 (9)
October 2008 (6)
September 2008 (4)
August 2008 (1)
July 2008 (7)
June 2008 (5)
May 2008 (4)
April 2008 (4)
March 2008 (3)
February 2008 (3)
January 2008 (10)
December 2007 (6)
November 2007 (4)
October 2007 (11)
September 2007 (4)
August 2007 (6)
July 2007 (8)
June 2007 (3)
May 2007 (21)
April 2007 (25)
March 2007 (25)
. My Personal Blog .
Practice This
.Net Performance How To's
Improving .NET Application Performance and Scalability
Exceptional Performance
Performance Testing Guidance How-To's
Fiddler PowerToy - Part 2: HTTP Performance
Performance Testing with Fiddler
Bottleneck-Detection Counters
Troubleshooting Performance Problems in SQL Server 2005
Performance Frame - v2
12 Steps To Faster Web Pages With Visual Round Trip Analyzer
.Net Security How To's
patterns & practices Security How To's Index
ASP.NET 2.0 Security Questions and Answers
Tamper detection
Authentication Hub
VSTS Resources
Architecture and Design checklists
Securing Sites with IP Address Restrictions
WCF - XSD validation for WCF services
WCF - Message Inspectors
Using Credential Management in Windows XP and Windows Server 2003
WCF - Common Security Scenarios
WCF - Authorization
Validating XML Data with XmlReader
Input Validation - XML Data
Validation - Web Client Software Factory
patterns & practices WCF Security Application Scenarios
Microsoft Identity and Access Management Series
Design Patterns
data & object factory
Yahho Design Pattern Library
Sample .Net 3.0 app
Application Architecture for .NET: Designing Applications and Services
Litware HR - A Multitenant sample application
Microsoft .NET Pet Shop 4.0
Responsive Composite Web Client Reference Implementation
Table of Contents: Introduction to CAB/SCSF
ASP.NET Quickstarts
Microsoft Identity and Access Management Series
Software design patterns
Impactful
Super Size Me
Billy Eliot
The Legend of 1900
The Terminal
The Counterfeiters
Lifecycle Phases
5. Deployment Phase
3. Development Phase
4. Test Phase
1. Inception Phase
2. Planning Phase
Popular
My Favorite Shortcuts
My Pipeline Is My Inbox
Security .Net Code Inspection Using Outlook 2007
Security Code Inspection - Eternal Search For SQL Injection
.Net Assembly Spoof Attack
Code Inspection - First Look For What To Look For
How To Hack WCF - New Technology, Old Hacking Tricks
Generate Documents Out Of Mail Items Directly From Outlook 2007
ARCast With Ron Jacobs - Defending the Application
How to Use Outlook 2007 RSS To Effectively Aggregate And Distill Information
Tools
Fiddler2 Web Debugger - Freeware HTTP(S) debugging tool
Microsoft Network Monitor 3
FxCop Team Page
Microsoft Threat Analysis & Modeling
Windows Sysinternals tools
Log Parser 2.2
p&p Practices Checker - performance
Microsoft ® Windows Server ™ 2003 Performance Advisor
Ajax View
WCat 6.3 (x86)
Funnel Web Analyzer 5.0 for Windows
Syndication
RSS 2.0
Atom 1.0