|
|
|
|
|
Total Hits: 53 | Today: 0
|
Author: Shawn Hernan and Scott Lambert and Tomasz Ostwald
|
Rating:
|
|

Whether you're building a new system or updating an existing one, you'll want to consider how an intruder might go about attacking it and then build in appropriate defenses at the design and implementation stages of the system. At Microsoft, we approach the design of secure systems through a technique called threat modeling—the methodical review of a system design or architecture to discover and correct design-level security problems. Threat modeling is an integral part of the Security Developme...
|
|
|
|
Total Hits: 33 | Today: 0
|
Author: Roger Onslow
|
Rating:
|
|

In order to access Win2000 specific APIs etc, one needs the following #define in the application's stdafx.h (before any other #includes) With the latest platform SDK, this also has the side effect of changing the definition for the OPENFILENAME struct; in particular it makes it larger. This is because of the following lines in the "CommDlg.h" This means when the definition of class CFileDialog is compiled, it's m_ofn member will have a different size than in the MFC dlls....
|
|
|
|
Total Hits: 50 | Today: 1
|
Author: UB
|
Rating:
|
|

Over the past years, I've learned many things from CodeProject ... and now I'm giving back to the CodeProject. Since I didn't find any articles on Code Access Security, here's my one. Enjoy! I'm not going to bore you with theory, but before we wet our feet, there are some concepts, keywords that you should learn. .NET has two kinds of security: 1. Role Based Security (not being discussed in this article) 2. Code Access Security The Common Language Runtime (CLR) allows code to per...
|
|
|
|
Total Hits: 34 | Today: 0
|
Author: Gideon Engelberth
|
Rating:
|
|

Powershell is a useful tool for developers and system administrators alike. Much of its usefulness comes from being able to craft a complicated, multi-part command to get some useful piece of information. The problem is that once I close the window, the command is gone. If I really want to save that command, I could make a script, but that involves taking several steps to open a text editor, type in the command, and save the script file. Furthermore, I then have to either type in the full path o...
|
|
|
|
Total Hits: 37 | Today: 0
|
Author: razi bin rais
|
Rating:
|
|

When I first looked at SharePoint Server 2003, it seemed to me like a web application with very attractive CSS and DHTML. It’s only later when I started development in WSS/Share Point Server 2003 then I realized the scope of this massive product. The WSS and SharePoint Portal Server 2003 are no doubt much more than web applications that install in 20 minutes with a database(s). In order to really unleash their power and for utilizing their features to the full extend, one must know what happens ...
|
|
|
|
Total Hits: 34 | Today: 0
|
Author: Bipin Joshi
|
Rating:
|
|

Developing a nice custom control is just one part of the story. As a control author you should also pay attention about the experience of other developers who will be using your control. In most of the real world cases developers use Visual Studio as the IDE for developing .NET applications. You can enhance the experience of other developers using your control by providing proper designer support. For example, you can control how your control properties and events are displayed in property windo...
|
|
|
|
Total Hits: 25 | Today: 0
|
Author: Ken Spencer
|
Rating:
|
|

I have lots of experience developing ASP applications that use Visual J++® components wrapped in COM running in Microsoft® Transaction Services (MTS). I am currently developing an application with the Microsoft .NET Framework and have written several classes that perform the bulk of my data access. I then use these classes in my ASPX pages. This application will have as many as 10,000 concurrent users....
|
|
|
|
Total Hits: 31 | Today: 0
|
Author: John Papa
|
Rating:
|
|

A solid data access later (DAL) can benefit an application by hiding redundant tasks, helping handle exceptions more gracefully, helping clean up resources more efficiently, and providing a layer of abstraction from the database. When you want to install a DAL in your architecture, you need to either find or build a data access component. Building one takes precious time away from a project's design, development, and testing timeline. What if you could find one that was already tested, follows b...
|
|
|
|
Total Hits: 66 | Today: 0
|
Author: Stephen Huen
|
Rating:
|
|

For use in Microsoft Office SharePoint Server (MOSS) 2007, this Web part displays the site structure in a hierarchical tree that is expandable and collapsible. It is based on my Site Map custom control written for Content Management Server 2002. The Web part uses a PortalSiteMapProvider to render the site structure in a hierarchical tree that is expandable and collapsible. The PortalSiteMapProvider is referenced from the site's web.config and is defaulted to be CurrentNavSiteMapProvider, as used...
|
|
|
|
Total Hits: 35 | Today: 0
|
Author: Keith Brown
|
Rating:
|
|

Windows Communication Foundation performs a lot of the heavy lifting to make it easier for your service to provide the basic security features that most distributed systems need. The big three protections— confidentiality, integrity, and authentication (or CIA as I like to think of them) are provided by most standard Windows® Communication Foundation bindings. If you don't want these protections, you'll have to turn them off, because they are on by default....
|
|
|
|
Total Hits: 30 | Today: 0
|
Author: Aaron Skonnard
|
Rating:
|
|

It's been a while since I've written on a core XML topic, and I miss it. Now that the Microsoft® .NET Framework 2.0 has shipped and is in the hands of countless developers worldwide, it seems like a good time to discuss the improvements found in System.Xml, which sits at the heart of all .NET-based Web service apps. From early in the design process, the System.Xml team had some ambitious goals for version 2.0, but for better or worse, not everything made it into the final release. In fact, many ...
|
|
|
|
Total Hits: 31 | Today: 0
|
Author: Mark Novak and Andrew Roths
|
Rating:
|
|

If you are faced with creating a new communications protocol, what are you going to do to ensure that it is safe and secure? While a complete answer might take an entire volume, here we will highlight some of the most common scenarios and concerns. Many of the topics considered here are not unique to networking. They apply to any software that has security features, be it encrypting files or making access control decisions. Software security principles transcend technologies and tend to be pr...
|
|
|
|
|
|