This is the slide deck for the presentation I gave at SD Best Practices 2007, in Boston, MA

1. Securing the MVC Architecture Part Two Alex Smolen Software Security Consultant Foundstone, Inc Mission Viejo, CA [email_address]

2. Analysis of Frameworks

6. Struts Data Validation Architecture

8. Struts Authorization Architecture

10. Struts Error Handling Architecture

12. Servlet Forms Authentication

13. Servlet Session Management

15. Servlet Authorization

18. Is ASP.NET MVC?

20. ASP.NET Validation Architecture

22. ASP.NET Authorization Architecture

24. ASP.NET Error Architecture

26. ASP.NET Data Protection Architecture

28. ASP.NET Session Management Architecture

31. Ruby on Rails Architecture

33. Ruby on Rails Validation Architecture

35. Ruby on Rails Error Handling Architecture

44. Conclusion

45. Conclusion

46. Conclusion