Security How Tos

How Tos are steps to execute an end to end task.

.NET 2.0

• How To Delay Sign an Assembly in .NET 2.0
• How To Use SecureString in .NET 2.0

Security Engineering

Design Inspections How To: Perform a Security Design Inspection for Web Applications Code Inspections How To: Perform a Security Code Inspection for Managed Code (Baseline Technique) Deployment Inspections How To Perform a Security Deployment Inspection for ASP.NET 2.0

Threat Modeling How To: Create a Threat Model for a Web Application at Design Time

Threats and Countermeasures

Identify Vulnerabilities How To Identify Buffer Overflow Vulnerabilities How To Identify Buffer Underwrite Vulnerabilities How To Identify Canonicalization Vulnerabilities How To Identify Cross Site Scripting Vulnerabilities How To Identify Heap Overflow Vulnerabilities How To Identify Improper String Length Checking Vulnerabilities How To Identify Integer Overflow Vulnerabilities How To Identify Miscalculated Null Termination Vulnerabilities How To Identify One-Click Vulnerabilities How To Identify Plaintext Attacks How To Identify SQL Injection Vulnerabilities How To Identify Stack Overflow Vulnerabilities How To Identify Unchecked Array Indexing Vulnerabilities Test for Vulnerabilities How To Test For Buffer Overflow Vulnerabilities How To Test For Buffer Underwrite Vulnerabilities How To Test For Canonicalization Vulnerabilities How To Test For Cross Site Scripting Vulnerabilities How To Test For Forceful Browsing Vulnerabilities How To Test For Heap Overflow Vulnerabilities How To Test For Integer Overflow Vulnerabilities How To Test For Miscalculated Null Termination Vulnerabilities How To Test For Plaintext Vulnerabilities How To Test For One-Click Vulnerabilities How To Test For SQL Injection Vulnerabilities How To Test For Stack Overflow Vulnerabilities How To Test For Improper String Length Checking Vulnerabilities How To Test For Unchecked Array Indexing Vulnerabilities

Protect from Security Issues How to Handle Special Characters with Dynamic SQL How To Protect from Injection Attacks in ASP.NET 2.0 How To Prevent Cross Site Scripting in ASP.NET How To Protect From SQL Injection in ASP.NET How To Protect from Stack Overflows How To Protect from Heap Overflows How To Protect from Buffer Underwrites How To Protect from Integer Overflow How To Protect from Unchecked Array Indexing How To Protect from Miscalculated Null Termination How To Protect from Improper String Length Checking