Jeff Ayers
Application Security Architect
Manchester, MO
Open Spaces: Security Q & A
Level: 200
Speaker: Jeff Ayers
Topics: Security
Code Contracts
Input validation is the most powerful tool in your arsenal when it comes to protecting your server application from attack. Code Contracts provides the syntactic sugar to build validation rules (i.e. contracts) into your code that are enforced by .NET at compile time and runtime. Not only check input validation (pre-conditions) but post conditions and invariants (rules that must always be true).
Level: 100
Speaker: Jeff Ayers
Topics: .NET Framework
Windows Identity Foundation
Identity management is something all of us dread and yet all of us must implement. Too often, authentication and authorization quickly becomes messy to implement and impossible to upgrade – avoidance is the only sane thing to do until now. WIF provides a layer of abstraction that separates the mess from your business logic and might just make managing identities more interesting to you.
Level: 100
Speaker: Jeff Ayers
Topics: .NET Framework, Security
