|
 |
 |
 |
|
|
 |
|
|
Securing and Deploying Microsoft .Net Assemblies |
Duration: 3 days |
|
|
This course is
intended for experienced developers who will be developing and deploying secure .NET applications.
This course is not intended for non-developers, nor is it intended for developers who are
unfamiliar with Microsoft tools and technologies. |
|
Participants must have experience "Programming the Microsoft .NET Framework with C#" (MS# 2349), or have a
solid understanding of the .NET Framework. A basic skill level in C#, or a working knowledge of and
comfort with C++ syntax; and a working knowledge of COM |
|
|
Description |
The goal of this intermediate/advanced course is to enable experienced developers to build Microsoft .NET compatible applications by using assemblies, which are the basic unit of versioning, isolation, security, and deployment in the .NET Framework environment
This course provides developers with a solid understanding of how to develop and deploy private and shared assemblies. It focuses on configuration, versioning, and security issues. Topics include:
- Types of assemblies
- Side-by-side versioning in the global assembly cache
- MSI deployment using Microsoft Visual Studio® .NET deployment projects
- Strong-name signing
- Code Access Security
- .NET role-based security
- Isolated storage
- The course also includes an introduction to interoperation between .NET
components and Microsoft WIN32® code and COM code
|
|
Objectives |
- Define the term assembly, list the programming problems that assemblies solve, and describe how code in an assembly is executed
- Use code signing to create strong-named assemblies
- Create Visual Studio .NET deployment projects to deploy assemblies using the Microsoft Windows® Installer
- Describe how type safety, verification, and strong-name signing improve application security
- Use code access security to develop and use secure assemblies
- Implement role-based security in an assembly by using principals and identities, and create and use isolated storage
|
|
Course Outline |
Introduction To Assemblies
- The Programming Problems Assemblies Solve
- Assembly Concepts
Creating an Assembly
- Introduction to Metadata
- Creating, Packaging, and Referencing an Assembly
- Reflection
Deploying an Assembly
- Binding Policy and Configuration Files
- Types of Deployment
- Deploying Private Assemblies
- Deploying Strong-Named Assemblies
- Deployment options
Assembly Versioning and Satellite Assemblies
- Versioning
- Incremental Download
- Satellite Assemblies
|
|
Type Safety, Verification, and Code Signing
- Introduction to Security
- Type Safety and Verification
- Code Signing
- Cryptographic Services and Data Signing
Code Access Security
- Evidence-Based Security
- Security Policy
- Imperative Code Access Security
- Declarative Code Access Security
- Miscellaneous Topics in Code Access Security
Role Based Security and Isolated Storage
- Role-Based Security
- Creating Principals and Identities
- Performing Role-Based Security Checks
- Isolated Storage
- .NET Security Summary
Interoperating Between Managed and Unmanaged Code
- Integration Services
- Platform Invoke
- Calling COM Objects from Managed Code
- Calling .NET Objects from COM Objects
| |
|
|