net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/obsfucation.html
The Role of Publisher Certificates :. Strong names provide an assembly a unique identity in the .NET universe; however they do not identify the literal publisher of the assembly (e.g. Microsoft Corporation, Intertech Training, Bob’s Software Shop, etc). The NET platform supports the use of publisher certificates for this purpose. Companies obtain a digital Software Publisher Certificate (SPC) from companies such as VeriSign. Strong names and publisher certificates both provide a digitally sign an assembly.
net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/disassemble-compile.html
Dissassembling an Assembly using Ildasm.exe :. The ildasm.exe utility ships with the .NET Framework SDK. Using this tool you are able to:. View the internal CIL, manifest and metadata for a given assembly. Dump the assembly contents to a CIL source code file (*.il). Most NET programmers leverage the GUI front end to ildasm.exe; however the tool can also be driven entirely from the command line. Flag to see the list of all possible options. First, navigate to the bin Debug subdirectory of your project.
net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/index.html
Review the composition of .NET assemblies. Understand the role of Application Domains. Learn to protect assemblies from tampering using strong names. Understand the role of obfuscation. Understand the role of publisher certificates. Understand the role of FxCop.exe. Define the role of cryptographic services. Understand the role of hash algorithms and hash codes. Generate hashed data using the .NET framework. Validate hash codes programmatically. Reviewing the .NET Assembly Format. Regardless of the assem...
net-security-training-guide.com
.NET Security
http://www.net-security-training-guide.com/hashing.html
Defining Hashing Algorithms and Hash Codes :. The NET framework provides numerous ways for developers to generate ‘hash codes’. Hash codes also go by the term ‘message digest’ or ‘message fingerprint’. A hash code is a numerical value generated from a specific input value and a specific hash code algorithm. Understand that the same hash code value will be generated when using the same input value / algorithm combination. Hash codes are useful whenever you with to ensure the integrity of a message:. Imagi...
spring-training-guide.com
Spring Tutorial - JSR250
http://www.spring-training-guide.com/aop-bean-pointcut.html
In Spring 2.0, annotations were introduced to greatly simplify the configuration of aspects. In Spring 2.0, an aspect is made from any class using the @Aspect annotation. Pointcuts designators are then used to indicate when/were the advice of an aspect was triggered. In the example below, an execution designator is used to signal that the advice should trigger for any method of any class in the package. In Spring 2.0, there are nine (9) types of pointcut discriminators (see table below. execution. Anothe...
web-services-training-guide.com
Web Services Tutorial - Home
http://www.web-services-training-guide.com/xml-schema.html
One of the challenges of WSDL is describing the data being transferred to and from a web service. In the simple example we used with the stock quote the types passed to and from the service were very simple. The client passed in a string that represented a stock symbol. The server returned a floating point number (double) to the user. Even these simple types can cause systems to have interoperability problems. Different languages have different definitions of basic data types. Using XML schema you can li...
java-security-training-guide.com
Java Security Tutorial - Home
http://www.java-security-training-guide.com/asymetric-encryption.html
Asymmetric encryption (also known as Public-Key Encryption) gives us the means to give the sender and receiver two different keys:. To simplify how asymmetric encryption works, we will use names to describe communication:. Mulder has both a private and public key he sends Scully his public key. The Scully is only allowed to encrypt data using the public key. Scully cannot decrypt AND encrypt read her own data she can’t even read her own data that she encrypted. The private key is used by only Mulder.
ajax-training-guide.com
Ajax Tutorial - Home
http://www.ajax-training-guide.com/browser-wars.html
Impact of the Browser Wars:. Netscape dominated the browser market handily in the early years of the World Wide Web. Netscape Communications Corporation was founded by one of the developers of Mosaic, Marc Andreesen. Mosaic was the first popular graphic-oriented web browser. By 1995, the World Wide Web was gaining popularity and media attention. That year, Microsoft entered the browser arena with Internet Explorer 1.0, distributed with Microsoft Windows 95 Plus! Web development is different in the 2000’s.
java-security-training-guide.com
Java Security Tutorial - Home
http://www.java-security-training-guide.com/security-apis.html
There are four main API’s for security in Java:. Java Cryptography Architecture (JCA) encapsulates the overall architecture of Java’s cryptography concepts and algorithms. JCA includes both java.security and javax.crypto. The goal of JCA is to define and deal with simply the concepts. The actual implementations of cryptographic concepts are left to third party vendors known as cryptographic providers. Create and use message digests.
