Module 1: Overview of Application Security - The Importance of Application Security - Application Security Best Practices Module 2: Implementing Platform Security Best Practices - Security Best Practices for COM+, IIS, and SQL Server 2000 - Using ACLs and DACLs - Using Windows Least-Privilege Accounts - Using Audit Trails - Implementing Platform Cryptography - Implementing Data Protection Module 3: Implementing Coding Security Best Practices - Validating Application Input - Evaluating Canonicalization Issues - Using Security Exceptions Module 4: Using .NET Framework Security Features - Implementing CLR Security Mechanism - Implementing Security Using Application Domains Module 5: Implementing Role-based Security - Basics of Role-Based Security - Role-Based Security with Principal and Identity Objects - Role-Based Security with Permission Objects Module 6: Implementing Code-Access Security - Overview of Code-Access Security - Performing Basic Security Operations - Performing Imperative Security Operations - Performing Declarative Security Operations - Adding Permission Requests Module 7: Implementing Cryptography in .NET - Implementing Symmetric Cryptography - Implementing Asymmetric Cryptography Module 8: Securing ASP.NET Applications - Implementing Authentication in ASP.NET Applications - Implementing Authorization in ASP.NET Applications - Implementing Impersonation in ASP.NET Applications - Securing Web Files and Folders Module 9: Securing Remote .NET Applications - Introducing .NET Application Security - Implementing Authentication and Authorization in .NET Remoting Applications - Introducing Web Service Security - Implementing WS Security Module 10: Configuring .NET Security - Managing Security Policies Using Mscorcfg.msc - Managing Security Policy Levels Using Mscorcfg.msc Module 11: Implementing Security Testing - Overview of Security Testing - Creating a Security Test Plan - Performing Security Testing Module 12: Deploying Applications with Security - Deploying .NET Applications with Security Settings - Deploying .NET Applications with Publisher Identity and Code Integrity