EC-Council Certified Secure Programmer

More documents

Recommendations

Info

Page 16• Malicious Script Embedded in Client Web Requests: Effects• Malicious Script Embedded in Client Web Requests: Solution• Tool: Thicket Obfuscator for JavaScript• JavaScript Security in Mozillao JavaScript Security in Mozilla: Same Origin Policyo Same Origin Checko JavaScript Security in Mozilla: Signed Script Policy• Netscape’s SignToolo Netscape’s SignTool: Signing a File• Privileges• Tool for Encryption: TagsLock Pro• JavaScript Shell (Jash): Javascript Command-Line Debugging Tool• Tool: Script Encoder• Tool: Scrambler• VBScript: CryptoAPI Tools• Signing A Script (Windows Script Host )• Verifying a Script• Signature Verification Policy• Software Restriction Policies for Windows XP• Software Restriction Policies for Windows Vista and Server 2008• Designing a Software Restriction Policy• Creating Additional Rules• Blocking Malicious Scripts• Rule for Blocking Malicious ScriptsModule 08: Secure Microsoft.NET Programming• Common Terminology• Microsoft .NET: Introductionhttp://www.eccouncil.orgEC-Council
• .NET Frameworko .NET Framework Security Policy Model• Security Policy Levels• Security Features in .NET• Key Concepts in .NET Security• Code Access Security (CAS)• Using Code Access Security in ASP.NET• Steps to use CAS in ASP.NET Applications• Evidence-Based Security• Role-Based Securityo Role-Based Security: Windows Principalo Role-Based Security: Generic principal• Declarative and Imperative Security• Cryptography• Generate Key for Encryption and Decryption• Symmetric Encryption in .Net• Asymmetric Encryption in .Net• Symmetric Decryption in .Net• Asymmetric Decryption in .Net• Protecting Client and Server Data Using Encryption Sample• Cryptographic Signatures• Writing a Signature in .Net• Verifying a Signature in .Net• Ensuring Data Integrity with Hash Codes• Hash Code Generation• Verification of Hash Code• Classes Implementing Public-key Encryption Algorithms• Security Checklist for .NET FrameworkPage 17http://www.eccouncil.orgEC-Council
Page 1 and 2: Page 1EC-Council CertifiedSecure Pr
Page 3: Course DescriptionEC-Council Certif
Page 8 and 9: • Microsoft SDL Threat Modeling T
Page 11 and 12: • Countermeasure against Buffer O
Page 13 and 14: • Using Variable Arguments Proper
Page 15: o Code for GSS Client• Java Serve
Page 19: o Design Considerationso Applicatio
Page 22 and 23: Page 22o Web Application Fingerprin
Page 24 and 25: Page 24• SQL Server Security Mode
Page 26 and 27: Page 26• SQL Server 2005o Step 1:
Page 28 and 29: Page 28• Application Configuratio
Page 30 and 31: Page 30• Preventing Automatic Sub
Page 32 and 33: • Validation Process in XML• XM
Page 34 and 35: • Preventing Repurposing• SiteL
Page 36 and 37: Page 36• Authorization Controls
Page 38 and 39: Page 38Module 22: Secure Xcode Prog
Page 40 and 41: Page 40• Obfuscation Sample Code
Page 42 and 43: Page 42• Starting a Winsock 2 API
Page 44 and 45: Page 44• The Bind System Call•
Page 46 and 47: Page 46• Figures: Fake Chunk, Ove
Page 48 and 49: Page 48• The wiretap Library• A
Page 50 and 51: Page 50• Security and Trust Servi
Page 52 and 53: Page 52• SSL Certificates• Veri
Page 54 and 55: • Avoiding unvalidated redirects

EC-Council Certified Secure Programmer

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?