- Posted by Jon Galloway
- Posted in podcast
Buy Soma No Prescription, This week on Herding Code, Barry Dorrans educates, entertains, insults and scares us with his expert commentary on application security, threat modeling, analysis tools and common attacks. You've been waiting for this show. I just know it. Listen in as Barry talks security, pimps his new book, and comments on his new position at Microsoft, book burnings, guns, money, proper pronunciation and Jon's bald head. Soma for sale,
- Scott K shares that public facing applications and services seem to get the least attention when it comes to security - until there's an audit. Barry talks about the lack of security education and how training should be baked in from the ground up, buy Soma online cod. Order Soma from mexican pharmacy,
- Jon notes that folks don't start off projects thinking about security. First you code and then you worry about the risk. Barry speaks to the Security Development Lifecycle (SDL) and continuous threat modeling.
- Scott K asks if there is a security checklist which developers should consult when developing a web application. Barry references his book, buy generic Soma, Soma from canadian pharmacy, OWASP, CDE and Miter. Barry states that can't think like a hacker but you can think about the risks and "what happens if this goes wrong" or "I leak this information" or "there is a cross site scripting attack."
- Jon notes there are some security measures which are baked into the .NET Framework. Barry talks about a defense in depth strategy and the Web Protection Library (WPL.)
- Barry dives into a few of the security and code analysis tools like CAT.NET and FxCop which are available for Visual Studio. But how, where can i buy cheapest Soma online, Soma pharmacy, by the way, no tool offers a silver bullet, rx free Soma.
- Scott K asks where emphasis should be placed when implementing security measures. Barry responds by putting his security hat on and assuming that all users are scum. Trust no one, Buy Soma No Prescription. Soma samples,
- The guys get into encoding rules (when and where), XSS, where can i order Soma without prescription, Soma over the counter, SQL Injection and Cross-site request forgery. Jon asks more about the measures built into ASP.NET Webforms and ASP.NET MVC which help prevent attacks.
- Kevin asks a question about automatic encoding by the framework. Barry states this is a tricky solution to implement and suggests that frameworks should provide tools but developers should handle the encoding manually, buy Soma from mexico. Order Soma online c.o.d, Jon notes the new syntax in MVC 2 which facilitates this approach.
- Jon asks about testing frameworks and asks Barry for a checklist of steps which developers must complete if they wish to secure their applications. Barry rattles off a bunch of must-dos actions, order Soma no prescription, Soma price, pimps his book and pokes fun at American money.
- The guys talk about RIA, buy Soma without a prescription, Buy Soma online no prescription, Silverlight and Flash and briefly touch upon security benefits and issues. And then they discuss social engineering security/privacy issues.
- Scott K moves away from web applications and services. What about client applications? Barry talks about trusted sources, order Soma, Where can i buy Soma online, and the .NET and Java sandboxes. And the guys speak of OS sandboxes and vitualizing applications and Code Access Security (CAS.)
- Barry talks about FoxPro thanks to a Twitter question from @jglazano and the show finishes up with talk about blue and black hats, security snake oil and scary security stories. But wait! Jon remembers he wanted to talk about OpenId and the show continues with a discussion about OpenId, australia, uk, us, usa, canada, mexico, india, craiglist, ebay, paypal, Buy Soma no prescription, CardSpace and OAuth and OAuth WRAP.
- Barry Dorrans' Blog
- Beginning ASP.NET Security, purchase Soma online, Online buy Soma without a prescription, Barry Dorrans
- Google Buzz
- Writing Secure Code, Michael Howard
- Developing More-Secure Microsoft ASP.NET 2.0 Applications, buy Soma in canada, Buy cheapest Soma, Dominick Baier
- Threat Modeling, Window Snyder and Frank Swiderski
- PCI Compliance
- OWASP Top 10
- WebGoat Project
- CWE/SANS Top 25
- Web Protection Library (WPL) - Evolution of Anti-XSS Library
- Microsoft Code Analysis Tool .NET (CAT.NET)
- XSS Attack Tool
- XSS (Cross Site Scripting) Cheat Sheet
- Tamper Data Firefox Add-on
- Enough Rope to Shoot Yourself in the Foot: Rules for C and C++ Programming
- NoScript Firefox Add-on
- App-V (Microsoft Application Virtualization, buy no prescription Soma online, Online buying Soma, formerly Microsoft Softgrid)
- We Should Be Virtualizing Applications Not Machines
- Javier Lazano
- Microsoft BlueHat Security Briefings
- Black Hat Technical Security Conference
- OAuth / OAuth WRAP
- Kim Cameron's Introduction to the Laws of Identity
Show notes compiled by Ben Griswold. Thanks!
Download / Listen:
Herding Code 75: Barry Dorrans on Developer Security
[audio:http://herdingcode.com/wp-content/uploads/HerdingCode-0075-Barry-Dorrans-on-Developer-Security.mp3], where can i find Soma online
. Buy cheap Soma no rx. Purchase Soma online no prescription.
Similar posts: Buy Zithromax No Prescription. Buy Diazepam No Prescription. Buy Flagyl No Prescription.
Trackbacks from: Buy Soma No Prescription. Buy Soma No Prescription. Buy Soma No Prescription. Buy Soma No Prescription. Buy Soma No Prescription. Buy Soma No Prescription. Buy Soma No Prescription. Buy generic Soma. Rx free Soma. Where can i buy cheapest Soma online. Buy cheapest Soma. Order Soma no prescription.
This entry was posted
on Friday, March 5th, 2010 at 4:08 pmand is filed under podcast.
You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.