Securing .Net Web Services

    

Summary:
This lab-intensive, hands-on .Net security training course, essential for experienced enterprise developers who need to produce secure .Net-based web services. In addition to teaching basic programming skills, this course digs deep into sound processes and practices that apply to the entire software development lifecycle. Designing, implementing, and deploying secure services presents unique challenges. In addition to dealing with all of the vulnerabilities and attacks associated with web applications, web services must address business-oriented concerns such as authentication, authorization, non-repudiation and others. The complicating factor is that all measures must be implemented within the constraints of standards and high-level s of inter-operability.In this course, students thoroughly examine best practices for defensively coding .Net services, including XML processing. Students will repeatedly attack and then defend various assets associated with fully-functional web services. This hands-on approach drives home the mechanics of how to secure .Net web services in the most practical of terms.

Duration:
4 Days/Lecture & Lab

Audience:
This is an intermediate-level .Net programming course designed for application project stakeholders who wish to get up and running on developing well defended .Net applications.

Topics:

• Foundation
• SOA Security Overview
• Applying Security to Services
• Defending XML Processing
• WS-Security
• Top Security Vulnerabilities
• Best Practices
• Secure Software Development
• Security Testing

Prerequisites:
Familiarity with the C# programming language is required, and real world programming experience is highly recommended.

Last Update: May 23, 2012