Certified Secured .NET Developer(CSDD)

The course will present security guidelines and considerations in .NET applications development. The participants will learn the basics of application security, how to enforce security on a .NET application, using .NET crypto API and other security related issues. In addition, the course presents an overview of .NET's Security Framework, including authentication and authorization implementation.

Course Contents

Session One: Overview of Application Security   Module 1:Importance of Application Security   Module 2: Owasp Top Ten   Module 3: Application Security Best Practices

Session Two: Implementing Platform Best Practices   Module 4: Security Best Practices For Com+, SQL Server                  Module 4.1: Service Account Selection and Management                  Module 4.2:Authentication Mode   Module 5: Implementing Data Protection

Session Three: Implementing Coding security Best Practices   Module 6: Validating Application Input   Module 7: Evaluating Canonicalization Issues

Session Four: Using .NET Framework Security Features   Module 8: Implementing CLR Security Mechanism

Session Five: Implementing Role Based Security   Module 9: Basic Role Based Security   Module 10: Role Based Security with Principal and Identity Objects   Module 11: Role Based Security with Permission Objects

Session Six: Implementing Code - Access Security   Module 12: Overview of Code Access Security   Module 13: Basic Security Operations   Module 14: Adding Permission Requests

Session Seven: Implementing Cryptography in .NET   Module 15: Implementing Symmetric Cryptography   Module 16: Implementing Asymmetric Cryptography

Session Eight: Securing ASP.NET Applications   Module 17: Implementing Authentication in ASP.NET Application   Module 18: Implementing Authorization in ASP.NET Application   Module 20: Implementing Impoersonation in ASP.NET Application   Module 21: Securing Web Files and Folders

Session nine: Securing Remote .NET Application   Module 21: Introducing .NET Application Security   Module 22: Implementing Authentication and Authorization in .NET Remote Applications   Module 23: Introducing Web Service Security

Session Ten: Configuring .NET Security   Module 24: Managing Security Policies   Module 25: Managing Security Policy Levels

Session Eleven: Deploying Applications with Security   Module 26: Deploying .NET Applications with Security Settings.

Who should attend this course?

• .NET developers wishing to improve their security skills

Objectives of the course

Upon completion of this course, participants will be able to:
• Understand the need for security
• Understand the security threats
• Implement code security best practices
• Implement role based security
• Improve security of ASP.NET Applications