Security Tutorials & Articles from Developer Fusion https://www.developerfusion.com/t/security/tutorials/sort/popularity/ Security Tutorials & Articles from Developer Fusion http://www.rssboard.org/rss-specification en-GB Mon, 22 Nov 2010 12:24:00 GMT Isolated Storage Isolated Storage is a solution to a very common problem, but if you don't understand it then it becomes a problem in its own right. http://www.developerfusion.com/article/84438/isolated-storage/ http://www.developerfusion.com/article/84438/isolated-storage/ Mon, 22 Nov 2010 12:24:00 GMT Ian Stevenson What You Need to Know about PCI Compliance and Web Application Security Policy Changes PCI compliance exists to protect consumers from credit fraud, and their data will be protected if rules are followed. If your business accepts credit cards, you are aware of changes to PCI compliance in June. Adherence to section 6.6 of the PCI compliance rules should have been met; if not, web application security must be integrated into existing applications. This mandate allows businesses to evaluate their security practices. http://www.developerfusion.com/article/7641/what-you-need-to-know-about-pci-compliance-and-web-application-security-policy-changes/ http://www.developerfusion.com/article/7641/what-you-need-to-know-about-pci-compliance-and-web-application-security-policy-changes/ Sat, 12 Apr 2008 11:02:00 GMT Michael Sutton How to access Outlook and post to a blog using C# An article for all those like Robert Scoble who would like to be able to drag and drop an item to a folder in their Outlook and post it instantly to their Blog. We also briefly cover web services and talking to Outlook. http://www.developerfusion.com/article/4667/how-to-access-outlook-and-post-to-a-blog-using-c/ http://www.developerfusion.com/article/4667/how-to-access-outlook-and-post-to-a-blog-using-c/ Fri, 11 Feb 2005 13:52:00 GMT Simon Soanes Isolated Storage in .NET Knowing how and where to store things is bread and butter stuff for an Application Developer. This article examines an area of storage known as ‘Isolated Storage’ that was introduced to the Windows environment alongside the introduction of the .NET Framework. We’ll discover, what it is and how and why to use it. http://www.developerfusion.com/article/4636/isolated-storage-in-net/ http://www.developerfusion.com/article/4636/isolated-storage-in-net/ Mon, 06 Dec 2004 15:08:00 GMT Graham Parker .NET Applets Mark walks you through how you go about creating a ".NET Applet" - a Windows Forms control hosted within a web page. http://www.developerfusion.com/article/4683/net-applets/ http://www.developerfusion.com/article/4683/net-applets/ Wed, 30 Mar 2005 22:16:00 GMT M Kenyon Client Server Programming with Winsock Winsock control comes with VB6 and is used to create applications that access the low-level functions of the Transmission Control Protocol/Internet Protocol (TCP/IP). http://www.developerfusion.com/article/1845/client-server-programming-with-winsock/ http://www.developerfusion.com/article/1845/client-server-programming-with-winsock/ Wed, 31 Oct 2001 09:16:00 GMT S.S. Ahmed Dynamic Search Conditions in T-SQL A very common requirement in an information system is to have a function (or several functions) where the users are able to search the data by selecting freely among many possible criterias. In this text I will look at various techniques to solve this problem. http://www.developerfusion.com/article/7305/dynamic-search-conditions-in-tsql/ http://www.developerfusion.com/article/7305/dynamic-search-conditions-in-tsql/ Sat, 01 Dec 2007 13:46:00 GMT Erland Sommarskog Locking the Door behind You: Hacker Protection for Your Web Applications Your Web applications can be the most important and most vulnerable entry point into your organization, and, as such, ensuring adequate hacker protection in your Web applications can be critical. This article discusses some of the issues. http://www.developerfusion.com/article/5381/locking-the-door-behind-you-hacker-protection-for-your-web-applications/ http://www.developerfusion.com/article/5381/locking-the-door-behind-you-hacker-protection-for-your-web-applications/ Tue, 14 Feb 2006 20:59:00 GMT Caleb Sima SQL Trusted Connections with ASP.NET Hard coding passwords into your application or your web site is a bad thing. Barry looks at how we can use trusted connections to provide the authentication we need, without the need for these potential security hazards. http://www.developerfusion.com/article/7142/sql-trusted-connections-with-aspnet/ http://www.developerfusion.com/article/7142/sql-trusted-connections-with-aspnet/ Tue, 09 Oct 2007 21:05:00 GMT Barry Dorrans API Programming Series #1 This is the first part of a series of articles explaining how to access and use the Win32 API from within VB. http://www.developerfusion.com/article/2371/api-programming-series-1/ http://www.developerfusion.com/article/2371/api-programming-series-1/ Sat, 13 Jul 2002 06:26:00 GMT Sreejath S. Warrier Top 10 Application Security Vulnerabilities in Web.config Files - Part One In part one of this two part article, you will learn about five of the top ten “worst offenders” of misconfigurations of application security that can cause overall problems for ASP.NET Web-based applications. Learn more about how to secure the Web.config files of an ASP.NET application. http://www.developerfusion.com/article/6678/top-10-application-security-vulnerabilities-in-webconfig-files-part-one/ http://www.developerfusion.com/article/6678/top-10-application-security-vulnerabilities-in-webconfig-files-part-one/ Mon, 14 May 2007 21:05:00 GMT Bryan Sullivan Testing for Security in the Age of Ajax Programming Ajax programming, which allows a web page to refresh a small portion of its data from a web server, is an exciting technology that has recently been introduced. However, this type of programming can also leave applications open to SQL injection and similar attacks. Learn more about Ajax programming and what it means in terms of security. http://www.developerfusion.com/article/6197/testing-for-security-in-the-age-of-ajax-programming/ http://www.developerfusion.com/article/6197/testing-for-security-in-the-age-of-ajax-programming/ Wed, 27 Sep 2006 22:24:00 GMT Bryan Sullivan New features for web developers in ASP.NET 2.0 ASP.NET 2.0 brings enhanced performance and many new features that make the web developer's life easier. Alex Homer takes you through what's new. http://www.developerfusion.com/article/5348/new-features-for-web-developers-in-aspnet-20/ http://www.developerfusion.com/article/5348/new-features-for-web-developers-in-aspnet-20/ Fri, 03 Feb 2006 12:25:00 GMT Alex Homer You Want Salt With That? Learn about "security through obscurity", what exactly is this "salt" stuff (in the cryptographic sense, not the chemical sense!), and why it's OK to make salts public knowledge. http://www.developerfusion.com/article/4679/you-want-salt-with-that/ http://www.developerfusion.com/article/4679/you-want-salt-with-that/ Tue, 22 Mar 2005 12:25:00 GMT Eric Lippert Top 10 Application Security Vulnerabilities in Web.config Files - Part Two In this second part of a two-part series, you will learn about application security issues related to authentication and authorization, as well as five vulnerabilities commonly found in ASP.NET web-based applications. Additionally, find out how to keep configuration files from being unintentionally modified by uninformed programmers or administrators, as well as why it is critical to never rely on default setting values. http://www.developerfusion.com/article/6745/top-10-application-security-vulnerabilities-in-webconfig-files-part-two/ http://www.developerfusion.com/article/6745/top-10-application-security-vulnerabilities-in-webconfig-files-part-two/ Sun, 10 Jun 2007 11:43:00 GMT Bryan Sullivan SharePoint, Document Library and SQL Server This tutorial shows how you can capture a document in SharePoint's document library, retrieve information from its properties and store in in SQL Server. It will teach you how to use Event Handler Toolkit. http://www.developerfusion.com/article/5613/sharepoint-document-library-and-sql-server/ http://www.developerfusion.com/article/5613/sharepoint-document-library-and-sql-server/ Wed, 19 Apr 2006 22:36:00 GMT S.S. Ahmed High-Performance .NET Application Development & Architecture This article demonstrates the art of creating and architecting high-performance and scalable .NET applications, covering all stages, from planning to development and their perspective best practices. http://www.developerfusion.com/article/5385/highperformance-net-application-development-architecture/ http://www.developerfusion.com/article/5385/highperformance-net-application-development-architecture/ Wed, 15 Feb 2006 15:25:00 GMT Dimitrios Markatos What's new in System.Xml 2.0 Just as XML itself has evolved, so the XML related classes in .NET Framework 2.0 have changed. Alex Homer finds out what's different. http://www.developerfusion.com/article/5199/whats-new-in-systemxml-20/ http://www.developerfusion.com/article/5199/whats-new-in-systemxml-20/ Mon, 30 Jan 2006 11:01:00 GMT Alex Homer Web Services Interoperability between J2EE and .NET - Part 3 Explore the source of the common interoperability challenges facing Web services integration across platforms. This third part in a series describes how the different naming conventions between J2EE technology and .NET can cause difficulty in Web services interoperability. http://www.developerfusion.com/article/5155/web-services-interoperability-between-j2ee-and-net-part-3/ http://www.developerfusion.com/article/5155/web-services-interoperability-between-j2ee-and-net-part-3/ Thu, 05 Jan 2006 21:28:00 GMT Wangming Ye Make your Classic ASP code work like in ASP.NET Developing in Classic ASP using the same technics as in ASP.NET?. If you have to work in Classic ASP, why don't do it the right way? By using a similar framework not only your code will be more organized and efficient, but it will take you a fraction of the time to port to ASP.NET! http://www.developerfusion.com/article/4403/make-your-classic-asp-code-work-like-in-aspnet/ http://www.developerfusion.com/article/4403/make-your-classic-asp-code-work-like-in-aspnet/ Sun, 15 Feb 2004 08:37:00 GMT Christian Calderon