Jeff Ayers

Scottrade

Application Security Architect

Manchester, MO

  • Code Contracts

    Input validation is the most powerful tool in your arsenal when it comes to protecting your server application from attack. Code Contracts provides the syntactic sugar to build validation rules (i.e. contracts) into your code that are enforced by .NET at compile time and runtime. Not only check input validation (pre-conditions) but post conditions and invariants (rules that must always be true).

    Level: 100

    Speaker: Jeff Ayers

    Topics: .NET Framework

  • Windows Identity Foundation

    Identity management is something all of us dread and yet all of us must implement. Too often, authentication and authorization quickly becomes messy to implement and impossible to upgrade – avoidance is the only sane thing to do until now. WIF provides a layer of abstraction that separates the mess from your business logic and might just make managing identities more interesting to you.

    Level: 100

    Speaker: Jeff Ayers

    Topics: .NET Framework, Security