Implementing claims-based solutions in your organization for authentication and authorization is now easier than ever before. Microsoft technologies including Active Directory Federation Services and Windows Identity Foundation (WIF) make it possible to quickly add claims-based identity solutions into your existing active directory infrastructure.
Web sites and applications can often benefit from integration with existing identity providers, allowing users to authenticate without creating new credentials. This video reviews a new wizard in Visual Studio 2013 for configuring security around ASP.NET sites in this fashion. You’ll see how easy it is to integrate your application …
This interview with a Microsoft Developer Security MVP takes you through some of the most important security aspects of the web and what web developers should be thinking about when developing. It discusses strategies and implementation details that should be considered to make sure your web app is as secure …
Chris Heinemann, Matt Fahler and Dhiren Vyas have recently completed a new security software rollout. They shared their recent success with implementing a static code analysis tool and demonstrated best practices to mitigate common security risks, such as SQL injection and cross-site scripting. The presentation covered prior tooling, the change …
This article discusses .NET assemblies and strong name signature. In addition to providing some benefits like versioning and giving name uniqueness to an assembly, strong name provides a strong integrity check, and here is the point of this article! By strongly naming an assembly, you are supposed to ensure that …
Microsoft’s new framework for writing RESTful web services and web APIs is appropriately enough called ASP.NET Web API. As the name applies, this technology is part of ASP.NET and also inherits its well-known security architecture. But in addition it also supports a number of new extensibility points and a flexible …
