Target Audience: This clinic provides students with knowledge and skills essential for the creation of applications with enhanced security. Attendees will be professional developers who are responsible for designing and developing applications, components, clients, or back-end data services written in Microsoft Visual Basic, Microsoft Visual C++, or C#.

Pre-requisites: Before attending this clinic, students must have the following pre-requisites:

• Development experience with Microsoft Visual Basic, Microsoft Visual C++, or C#
• Experience building Microsoft Windows or Web applications using the .NET Framework.

Purpose: After completing this clinic, students will be able to understand the historical implications of Trustworthy Computing; identify potentially hostile applications; identify common types of attacks; understand the consequences of poor security; recognize examples of security intrusions; identify challenges involved in implementing security; understand the need for process improvement throughout the development process; describe the security framework; understand the secure product development timeline; describe the principles of designing with security in mind; understand the importance of data security; identify threat scenarios; target who we are defending against; describe common types of attacks; describe Microsoft .NET Framework security features; explain how code access security works; explain how role-based security works; explain how to use cryptography to sign and verify data; enhance security for ASP.NET Web applications; enhance security for ASP.NET Web services; apply appropriate tips for writing secure code with the .NET Framework.