net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/obsfucation.html
The Role of Publisher Certificates :. Strong names provide an assembly a unique identity in the .NET universe; however they do not identify the literal publisher of the assembly (e.g. Microsoft Corporation, Intertech Training, Bob’s Software Shop, etc). The NET platform supports the use of publisher certificates for this purpose. Companies obtain a digital Software Publisher Certificate (SPC) from companies such as VeriSign. Strong names and publisher certificates both provide a digitally sign an assembly.
net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/disassemble-compile.html
Dissassembling an Assembly using Ildasm.exe :. The ildasm.exe utility ships with the .NET Framework SDK. Using this tool you are able to:. View the internal CIL, manifest and metadata for a given assembly. Dump the assembly contents to a CIL source code file (*.il). Most NET programmers leverage the GUI front end to ildasm.exe; however the tool can also be driven entirely from the command line. Flag to see the list of all possible options. First, navigate to the bin Debug subdirectory of your project.
net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/index.html
Review the composition of .NET assemblies. Understand the role of Application Domains. Learn to protect assemblies from tampering using strong names. Understand the role of obfuscation. Understand the role of publisher certificates. Understand the role of FxCop.exe. Define the role of cryptographic services. Understand the role of hash algorithms and hash codes. Generate hashed data using the .NET framework. Validate hash codes programmatically. Reviewing the .NET Assembly Format. Regardless of the assem...
net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/hashing.html
Defining Hashing Algorithms and Hash Codes :. The NET framework provides numerous ways for developers to generate ‘hash codes’. Hash codes also go by the term ‘message digest’ or ‘message fingerprint’. A hash code is a numerical value generated from a specific input value and a specific hash code algorithm. Understand that the same hash code value will be generated when using the same input value / algorithm combination. Hash codes are useful whenever you with to ensure the integrity of a message:. Imagi...
web-services-training-guide.com
Web Services Tutorial - Home
http://www.web-services-training-guide.com/uddi.html
UDDI (Universal Description Discovery and Integration):. To make Web services more useful the developers of Web services need to advertise their web services. You need to publish your services. You need to be able to find available services. You need to provide a convenient location for developers to download WSDL documents. To find available services we need to provide the same type of services that JNDI provides Enterprise Beans (EJB). A registry service for Web services must provide several features.
spring-training-guide.com
Spring Tutorial - JSR250
http://www.spring-training-guide.com/aop-bean-pointcut.html
In Spring 2.0, annotations were introduced to greatly simplify the configuration of aspects. In Spring 2.0, an aspect is made from any class using the @Aspect annotation. Pointcuts designators are then used to indicate when/were the advice of an aspect was triggered. In the example below, an execution designator is used to signal that the advice should trigger for any method of any class in the package. In Spring 2.0, there are nine (9) types of pointcut discriminators (see table below. execution. Anothe...
silverlight-training-guide.com
Silverlight Tutorial
http://www.silverlight-training-guide.com/index.html
Understand the role of Silverlight. Contrast the Silverlight 1.0 and 2.0 feature set. Examine the Silverlight 2.0 architecture. Overview key Silverlight 2.0 development tools. Learn the core Silverlight assemblies and namespaces. Learn the role of the Application and UserControl classes. Learn the syntax of XAML. Survey the Silverlight control set. Understand the control programming model. Learn to position controls using layout managers. Intercept mouse and keyboard events. This chapter gives an overvie...
web-services-training-guide.com
Web Services Tutorial - Home
http://www.web-services-training-guide.com/xml-schema.html
One of the challenges of WSDL is describing the data being transferred to and from a web service. In the simple example we used with the stock quote the types passed to and from the service were very simple. The client passed in a string that represented a stock symbol. The server returned a floating point number (double) to the user. Even these simple types can cause systems to have interoperability problems. Different languages have different definitions of basic data types. Using XML schema you can li...
java-security-training-guide.com
Java Security Tutorial - Home
http://www.java-security-training-guide.com/asymetric-encryption.html
Asymmetric encryption (also known as Public-Key Encryption) gives us the means to give the sender and receiver two different keys:. To simplify how asymmetric encryption works, we will use names to describe communication:. Mulder has both a private and public key he sends Scully his public key. The Scully is only allowed to encrypt data using the public key. Scully cannot decrypt AND encrypt read her own data she can’t even read her own data that she encrypted. The private key is used by only Mulder.
