Alik Levin's

Browse by Tags

Security Code Review – String Search Patterns For Finding Input Validation Vulnerabilities: Well defined set of search patterns helps significantly reduce time (cost) when performing security code inspections. This post focuses on input validation vulnerabilities commonly found in ASP.NET web applications. SQL Injection and Cross Site Scripting Read More...
Posted 11 July 08 02:24 by alikl | 2 Comments
Filed under Input Validation, Test Phase, Security, Tools
ASP.NET Performance Sin - Serving Images Dynamically (Or Another Reason To Love Fiddler): Serving images dynamically may cause performance hit. Dynamically served images require more HTTP requests which violates Steve Souders' performance rule #1 - Make Fewer HTTP Requests . The latency is also caused by parallelism (or parallel downloading) Read More...
Posted 02 May 08 02:12 by alikl | 6 Comments
Filed under Test Phase, Tools, Development Phase, Implementation, Performance, Planning Phase
Free Performance Tool - Analyze IIS Logs Like A Pro With Funnel Web Analyzer: These free performance tools will save you time and money identifying performance bottlenecks. Your customers will thank you for building fast and responsive applications. Funnel Web Analyzer 5.0 for Windows Download the tool here. Analyzer gives insight Read More...
Posted 21 April 08 11:16 by alikl | 10 Comments
Filed under Test Phase, Tools, Development Phase, Performance
Quickly Find And Fix Cross Site Scripting (XSS) Vulnerabilities In Your ASP.NET Application.: Want to quickly check your ASP.NET Web application for Cross Site Scripting (XSS) vulnerability ? It is pretty easy with the knowledge and tools you already have. This post describes how to quickly find and fix most of XSS vulnerabilities in your code. Read More...
Posted 17 March 08 03:56 by alikl | 1 Comments
Filed under Input Validation, Test Phase, Security, Tools
Performance Development Lifecycle (PDL) Session Materials: Yesterday I gave a talk about the subject during Performance Open House First off, thanks for attending my talk. The materials are published here . Enjoy. Read More...
Posted 11 March 08 10:16 by alikl | 2 Comments
Filed under Tools, Performance, Practices
Stress Test ASP.NET Web Application With Free WCAT Tool: Building ASP.NET web applications? Plan to serve thousands of users? Would you like to see how your application would behave [misbehave] under stress? Use simple-to-use and freely available WCAT tool to generate the load and get detailed report for expected Read More...
Posted 09 March 08 08:59 by alikl | 10 Comments
Filed under Test Phase, Tools, Performance
Performance Sin - Using Exceptions To Control Flow: Want to spot coding anti-patterns from performance perspective without actually looking in the code? One of the common performance coding anti-patterns I’ve noticed lately is using Exception Handling to control program flow. The anti-patterns Most Read More...
Posted 02 February 08 01:19 by alikl | 4 Comments
Filed under Test Phase, Tools, Development Phase, Performance, Practices, Exception Handling
Security Code Review – Use Visual Studio Bookmarks To Capture Security Findings: How to streamline the process of capturing security flaws during security code review? How to save time and avoid switching between the tools? How to stay focused? In this post I will show my simple technique to capture security flaws using Bookmarks Read More...
Posted 24 January 08 01:38 by alikl | 3 Comments
Filed under Test Phase, Security, Tools, Code Inspection, Practices
Performance Code Review Tool – Practices Checker: Care about performance? Do you write your code with performance in mind? Want little help to spot performance bottlenecks automatically? Practices Checker to the rescue. The goal of the tool is “Help you perform a manual code inspection by analyzing Read More...
Posted 21 January 08 09:37 by alikl | 8 Comments
Filed under Test Phase, Tools, Development Phase, Performance
Profiling JavaScript With Ajax View Tool: Spot Poor Performance Client Script In No Time: Ever wondered why your application unreasonably slow? You have it all - most powerful hardware, your database is tuned, SQL queries are optimized, network is barely utilized, and .Net code is super efficient. So why on earth response time is so slow? Read More...
Posted 17 January 08 04:19 by alikl | 2 Comments
Filed under Test Phase, Tools, Performance, AJAX
Create Your Own Guidance Explorer Items Inside Outlook 2007: Want to create your own nuggets of wisdom? Want it to look and feel like patterns&practices nuggets of wisdom look and feel? Want to reuse it, mix and match with existing ones? It is easy and fast with Outlook 2007. I will show how I extend my knowledge Read More...
Posted 10 January 08 04:52 by alikl | 1 Comments
Filed under Tools, Practices
Consume patterns&practices Guidance Explorer Via RSS Using Outlook 2007: patterns&practices recently released new version of Guidance Explorer [GE]. One of the most important addition was enabling RSS on the online GE store. What does that mean? It means you can consume distilled security, performance, and Visual Studio Read More...
Posted 03 January 08 09:43 by alikl | 6 Comments
Filed under Tools, Practices
Identify ASP.NET, Web Services, And WCF Performance Issues By Examining IIS Logs: Simple examination of IIS logs can reveal potential performance issues related to ASP.NET web applications, ASP.NET web services, and IIS hosted WCF services. Fast, easy, cheap. These are the simple steps I take: Time-Taken & W3C Logs: Turn it on... Read More...
Posted 02 November 07 10:49 by alikl | 8 Comments
Filed under Test Phase, Tools, Performance, Practices
Security Tools From Microsoft ACE Team: Mark covers arsenal of security tools available from Microsoft ACE team . The tools are: Threat Analysis & Modeling Enterprise (TAM-E) CAT.NET (Code Analysis Tool) Spider TCM (Assessment and compliance tool) Read More...
Posted 25 October 07 03:35 by alikl | 0 Comments
Filed under Security, Tools
XSSDetect Public Beta now Available!: XSSDetect public beta is now available for download on MSDN. Overview XSSDetect is a static code analysis tool that helps identify Cross-Site Scripting security flaws found within Web applications. It is able to scan compiled managed assemblies (C#, Visual Read More...
Posted 24 October 07 09:21 by alikl | 0 Comments
Filed under Test Phase, Security, Tools, Code Inspection, Development Phase

More Posts Next page »

Search

Go

This Blog

Home
Email

ads

. My Personal Blog .

Practice This

.Net Performance How To's

.Net Security How To's

Design Patterns

Impactful

Lifecycle Phases

Popular

Tools

Syndication