Edinburgh - 12th April 2007: Web Security Conference Day for Windows Developers
-
Details[^] Scottish Developers is a non-profit user group set up to support software developers of all types. Many events are free or low cost, yet we aim to deliver high quality content that participants will find immediately useful. Scottish Developers have secured the support of two consultants from Charteris plc, a respected IT and Managemant Consultancy and Microsoft Gold Partner. Barry Dorans and Chris Seary are security specialists who regularly speak on subjects relating to the securing of web applications. Come along on the 12th April for a full day of presentations and demonstrations surrounding the real world implications of the most common .NET web techologies: learn about the best practices, issues, gotchas, etc. Bring along your questions and problems to gain assistance in finding solutions. AGENDA 08:45 Registration 09:00 Hacking websites for fun and profit 10:30 Break 11:00 Securing applications and communications in ASP.NET 12:30 Lunch 13:30 Code Access Security - in-depth explanation and design pattern for web applications 15:00 Break 15:15 Securing Web Services with WS-* 16:45 Break 17:00 Managing Identity using Windows Cardspace 18:30 Close - These are rough timings. Some session may end earlier or run later. We aim to shape the day around people's need, not a time schedule! Hacking websites for fun and profit Presented by Barry Dorans How safe are your web sites? Do you know what cross site scripting is? SQL injection attacks? Search engine leaks? Learn how to check your sites for nasties by seeing how it's done against badly written code and what you can do to secure your sites. Securing applications and communications in ASP.NET Presented by Barry Dorans This session aims to provide you with recipes to secure your asp.net application architecture, be they internet, extranet or intranet exposed. Covering authentication and authorisation strategies, identity management, securing communications, secrets, viewstate and more the session will discuss common best practices for secure architecture of ASP.NET applications. Code Access Security - in-depth explanation and design pattern for web applications Presented by Chris Seary Chris has implemented CAS in several secure enterprise scale web applications. This talk will explain how CAS works, and also give d