Security Guidance Training for Developers

Microsoft Security eLearning Courses

Dana Epp's ramblings at the Sanctuary — Thu, 13 May 2004 00:59:00 GMT

I noticed Michael mention some new e-learning clinics on security that Microsoft is hosting. I was kinda interested in the developer focused one which is Clinic 2806: Microsoft Security Guidance Training for Developers. The layout of the course is pretty good. A quick review of the modules in the course may be in order: Clinic Introduction Essentials of Application Security Welcome to Essentials of Application Security The Importance of Application Security Secure Application Development Practices Security Technologies Secure Development Guidelines Summary Writing Secure Code - Best Practices Welcome to Writing Secure Code - Best Practices Secure Development Process Threat Modeling Risk Mitigation Security Best Practices Summary Writing Secure Code - Threat Defense Welcome to Writing Secure Code - Threat Defense The Need for Secure Code Defending Against Memory Issues Defending Against Arithmetic Errors Defending Against Cross-Site Scripting Defending Against SQL Injection Defending Against Canonicalization Issues Defending Against Cryptography Weaknesses Defending Against Unicode Issues Defending Against Denial of Service Summary Implementing Application Security Using the Microsoft .NET Framework Welcome to Implementing Application Security Using the Microsoft .NET Framework .NET Framework Security Features Code-Access Security Role-Based Security Cryptography Securing ASP.NET Web Applications Securing ASP.NET Web Services Summary Clinic Summary Clinic Evaluation As you can see this is a well rounded course, well suited to educate the principles of secure programming to many a developer. Almost all of this is covered off in Microsoft's security webcasts, but this structured format might make for more focused instruction for those who don't grasp the concepts that easily. Well done Microsoft. Education is key when it comes to security, and I like to see offerings like this... especially when its free. Whats this mean to you? It means you should probably go take the course if you are even considering touching code! Knowledge is power and all that. Never say no to free education. And even if you know these concepts... its nice to see how others are presenting the topic... allowing you to learn from the experience and pass it along to your teams. Enjoy!...

Microsoft eLearning Courses on Security

Robert Hurlbut's .Net Blog — Thu, 13 May 2004 02:41:00 GMT

Microsoft eLearning Courses on Security

Robert Hurlbut's .Net Blog — Thu, 13 May 2004 02:47:00 GMT

re: Security Guidance Training for Developers

G. Andrew Duthie — Thu, 13 May 2004 01:22:00 GMT

As one of the folks who's spent the last several weeks presenting two of the modules in 2806 (Essentials of Application Security and Writing Secure Code - Best Practices), I'm pleased to say that the session materials have been very well received. Having the sessions (plus the two other MSDN sessions) available online has been a nice bonus for our attendees, as well.

Security Guidance eLearning Training

Sergey Simakov blog — Fri, 14 May 2004 13:20:00 GMT

re: Security Guidance Training for Developers

电影免费下载 — Mon, 26 Jul 2004 05:47:00 GMT

Employment Wages » Michael Howard’s Web Log : Security Guidance Training for Developers

Sun, 30 Mar 2008 20:32:40 GMT

PingBack from http://employmentwagesblog.info/michael-howards-web-log-security-guidance-training-for-developers/

Michael Howard s Web Log Security Guidance Training for Developers | Insomnia Cure

Tue, 09 Jun 2009 01:46:18 GMT

PingBack from http://insomniacuresite.info/story.php?id=3885

Michael Howard s Web Log Security Guidance Training for Developers | unemployment office

Tue, 16 Jun 2009 10:56:06 GMT

PingBack from http://unemploymentofficeresource.info/story.php?id=3715