Deck from my Jan 2008 MSDN presentations - download presentations at http://www.msdnevents.com/resources/2008-winter-resources.aspx

7. HP Compaq dc7800 desktop PC with Intel ® Core ™ 2 Processor with vPro ™ Technology Special Offer: HP Compaq dc7800 Smart Buy*: Price: $1,059.00 Save $340! www.hp.com/go/smartbuy Intel® Core™2 Duo processor E6550 2.33 GHz 4 MB L2 cache 1333 MHz front side bus Intel Q35 Express Chipset 2 GB 667 MHz DDR2 SDRAM 160 GB 7200 rpm SATA 3 year warranty P/N: RU026UT *HP Smart Buys are the easiest way to get the most popular, expertly pre-configured, ready-to-ship business solutions at discounted prices.

9. What’s new for developers in IIS7

12. Architecture Overview HTTP Request HTTP Response Authentication Basic NTLM Anon CGI Static File ISAPI Send Response Compression Log HTTP Request Determine Handler aspnet_isapi.dll Authentication Windows ASPX Trace … Forms Map Handler HTTP Response Basic Anon Static File ISAPI Send Response Compression Log Execute Handler aspnet_isapi.dll Authentication Windows ASPX Trace … Forms Map Handler Authorization ResolveCache UpdateCache Authentication

14. Hosting a WCF Service in WAS Demo

16. Configuring IIS Demo

19. Authentication Modules Method Security Level How Passwords are Sent Crosses Proxy Servers and Firewalls Client Requirements Anonymous authentication None N/A Yes Any Browser ASP.NET Impersonation Medium Obscured Yes .NET Basic authentication Low Base64 encoded clear text Yes Most Browsers Digest authentication Medium Hashed Yes IE 5.0 or later FORMS authentication None Plain text Yes Windows authentication High Hashed or Kerberos ticket No, unless over VPN IE 2.0 for NTLM/ W2K and IE 5.0 for Kerberos Certificate authentication High N/A Yes, using a SSL connection IE and Netscape

20. Managing modules Demo

24. Extending IIS with managed code Demo

26. Web Security Sidebars MSDN Events

30. How To Build Secure Web Apps

31. Facets Of Web Security Web Security

32. 5 Most Common Security Risks

37. Cross Site Scripting

42. SQL Injection

47. Integer Overflow

52. Cross Site Request Forgery

57. Insecure Direct Object Reference

60. Extending ASP.NET Application Services MSDN Events Winter, 2007

66. Introducing Providers

68. Application Service Flexibility ASP.NET Silverlight Web Services SOAP Clients Application Services Ajax

70. Sharing Providers with Ajax and Silverlight

73. Using Application Services from a Rich Client

75. Thanks for attending! Lynn Langit MSDN Developer Evangelist – Southern California http://blogs.msdn.com/SoCalDevGal