Browse by Tags

• AJAX
• Authentication
• Code Inspection
• Deployment Phase
• Development Phase
• Exception Handling
• Implementation
• Information Gathering
• Input Validation
• Performance
• Planning Phase
• Practices
• Security
• Sensitive Data
• VSTS

Security Code Review – String Search Patterns For Finding Input Validation Vulnerabilities

Well defined set of search patterns helps significantly reduce time (cost) when performing security code inspections. This post focuses on input validation vulnerabilities commonly found in ASP.NET web applications. SQL Injection and Cross Site Scripting Read More...

Posted 11 July 08 02:24 by alikl | 2 Comments   
Filed under Input Validation, Test Phase, Security, Tools

ASP.NET Performance Sin - Serving Images Dynamically (Or Another Reason To Love Fiddler)

Serving images dynamically may cause performance hit. Dynamically served images require more HTTP requests which violates Steve Souders' performance rule #1 - Make Fewer HTTP Requests . The latency is also caused by parallelism (or parallel downloading) Read More...

Posted 02 May 08 02:12 by alikl | 7 Comments   
Filed under Test Phase, Tools, Development Phase, Implementation, Performance, Planning Phase

Free Performance Tool - Analyze IIS Logs Like A Pro With Funnel Web Analyzer

These free performance tools will save you time and money identifying performance bottlenecks. Your customers will thank you for building fast and responsive applications. Funnel Web Analyzer 5.0 for Windows Download the tool here. Analyzer gives insight Read More...

Posted 21 April 08 11:16 by alikl | 10 Comments   
Filed under Test Phase, Tools, Development Phase, Performance

Quickly Find And Fix Cross Site Scripting (XSS) Vulnerabilities In Your ASP.NET Application.

Want to quickly check your ASP.NET Web application for Cross Site Scripting (XSS) vulnerability ? It is pretty easy with the knowledge and tools you already have. This post describes how to quickly find and fix most of XSS vulnerabilities in your code. Read More...

Posted 17 March 08 03:56 by alikl | 2 Comments   
Filed under Input Validation, Test Phase, Security, Tools

Stress Test ASP.NET Web Application With Free WCAT Tool

Building ASP.NET web applications? Plan to serve thousands of users? Would you like to see how your application would behave [misbehave] under stress? Use simple-to-use and freely available WCAT tool to generate the load and get detailed report for expected Read More...

Posted 09 March 08 08:59 by alikl | 12 Comments   
Filed under Test Phase, Tools, Performance

Performance Sin - Using Exceptions To Control Flow

Want to spot coding anti-patterns from performance perspective without actually looking in the code? One of the common performance coding anti-patterns I’ve noticed lately is using Exception Handling to control program flow. The anti-patterns Most Read More...

Posted 02 February 08 01:19 by alikl | 4 Comments   
Filed under Test Phase, Tools, Development Phase, Performance, Practices, Exception Handling

Security Code Review – Use Visual Studio Bookmarks To Capture Security Findings

How to streamline the process of capturing security flaws during security code review? How to save time and avoid switching between the tools? How to stay focused? In this post I will show my simple technique to capture security flaws using Bookmarks Read More...

Posted 24 January 08 01:38 by alikl | 3 Comments   
Filed under Test Phase, Security, Tools, Code Inspection, Practices

Performance Code Review Tool – Practices Checker

Care about performance? Do you write your code with performance in mind? Want little help to spot performance bottlenecks automatically? Practices Checker to the rescue. The goal of the tool is “Help you perform a manual code inspection by analyzing Read More...

Posted 21 January 08 09:37 by alikl | 8 Comments   
Filed under Test Phase, Tools, Development Phase, Performance

Profiling JavaScript With Ajax View Tool: Spot Poor Performance Client Script In No Time

Ever wondered why your application unreasonably slow? You have it all - most powerful hardware, your database is tuned, SQL queries are optimized, network is barely utilized, and .Net code is super efficient. So why on earth response time is so slow? Read More...

Posted 17 January 08 04:19 by alikl | 3 Comments   
Filed under Test Phase, Tools, Performance, AJAX

Identify ASP.NET, Web Services, And WCF Performance Issues By Examining IIS Logs

Simple examination of IIS logs can reveal potential performance issues related to ASP.NET web applications, ASP.NET web services, and IIS hosted WCF services. Fast, easy, cheap. These are the simple steps I take: Time-Taken & W3C Logs: Turn it on... Read More...

Posted 02 November 07 10:49 by alikl | 10 Comments   
Filed under Test Phase, Tools, Performance, Practices

XSSDetect Public Beta now Available!

XSSDetect public beta is now available for download on MSDN. Overview XSSDetect is a static code analysis tool that helps identify Cross-Site Scripting security flaws found within Web applications. It is able to scan compiled managed assemblies (C#, Visual Read More...

Posted 24 October 07 09:21 by alikl | 1 Comments   
Filed under Test Phase, Security, Tools, Code Inspection, Development Phase

Visual Studio 2005 As General Code Search Tool

Visual Studio 2005 has powerful search capabilities. One of my favorites is "Find in Files". Just hit Ctrl+Shift+F (more shortcuts - My Favorite Shortcuts ). Essentially it uses FindStr utility that sits in System32 folder and comes for free with Windows Read More...

Posted 05 June 07 10:50 by alikl | 7 Comments   
Filed under Test Phase, Tools, Code Inspection, VSTS, Practices

Who Access My File?

In my post File Access Auditing - I Am Not Afraid Of GPO I've digested technet documentation on how to set Active Directory Group Policy Object (AD GP) to enable file access auditing as security measure to prevent repudiation. It is heavy weight techniques Read More...

Posted 03 April 07 07:02 by alikl | 7 Comments   
Filed under Test Phase, Security, Tools, Development Phase, Deployment Phase, Authentication

Performance Testing For The Masses

"FAST is cool, huh" - good friend of mine told me. No doubt. How do I identify the bottleneck with architecture like this? Is it Browser starving resources for client side JavaScript/AJAX heavy processing? Is it jumbo Http Responses (ViewState for example)? Read More...

Posted 28 March 07 06:16 by alikl | 10 Comments   
Filed under Test Phase, Tools, Performance

Security .Net Code Inspection Using Outlook 2007

In my previous post, Code Inspection - First Look For What To Look For , I've described how to look for sensitive data and hints in the compiled assemblies. The other challenge I was looking to solve is boosting my productivity. So with little magic of Read More...

Posted 26 March 07 03:04 by alikl | 8 Comments   
Filed under Test Phase, Security, Tools, Code Inspection, Development Phase

Search

This Blog

• Home
• Email