Alexis Smirnov > .NET
Thinking about .NET




Friday, June 13, 2003
 

[MSDN]: Improving Web Application Security: Threats and Countermeasures Roadmap

This guide gives you a solid foundation for designing, building, and configuring secure ASP.NET Web applications. Whether you have existing applications or are building new ones, you can apply the guidance to help you make sure that your Web applications are hack-resilient.

Stating the obvious, Patterns & Practices section of MSDN consistently delivers some of the most solid content of entire MSDN site.

 

 


    

Chris tells us about of Longhorn API review and in the process, lists some generally useful design guidelines that can benefit any .NET development team. It seems that API review is not a peer code review because it is done not by people involved in actual coding of a component. It’s not a design review because the team focuses on interfaces as oppose to their internal implementation.

 

Here’s my takeaway:

 

The team building the API had answers a standard questionnaire from the review team, which includes:
- target users
- potential security problems
- representative sample code that users would be expected to construct.

 

Specific advice from reviewers:
- use best practice coding conventions in sample code
- support IDisposable at a macro level instead of a micro level
- expose collections from properties returning IEnumerable (not from the parent object itself)
- prefer properties over Get/Set methods (as appropriate)
- don't tack the name of the enumeration type onto the enumeration values themselves
- prefer overloads to parameters that can be null
- prefer typed parameters to object parameters

Points above seem to be aligned with these guidelines.


    


Subscribe to "Alexis Smirnov > .NET" in Radio UserLand. Click to see the XML version of this web page. Click here to send an email to the editor of this weblog.
Site Statistics
© Copyright 2003 Alexis Smirnov.


Last update: 6/30/2003; 9:32:23 AM.

June 2003
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30          
May   Jul

Aug 2002