Parmeshwar’s Homespace

Today I have moved to new blog. You can find the new location of my blog at http://geekswithblogs.net/parmeshwar/.

As per the definition in MSDN: Threat modeling is an engineering technique you can use to help you identify threats, attacks, vulnerabilities, and countermeasures in the context of your application scenario. The threat modeling activity helps you to: 1. Identify your security objectives. 2.Identify relevant threats. 3. Identify relevant vulnerabilities and countermeasures

Following are some of the important resources about Threat Modelling 1. Threat Modelling Homepage 2. Threat Modelling Web Applications 3.Threat Modelling tool

Want to implement security in your application but does not know how to? Here is a big list of patterns and practises securit howtos which will guide you how to implement the security in your applications.

Visit 400+ Differences to get the details !!

Visit Security Shootout competition

Just now got an Apple iPOD Video with 30 GB memory space… a dream come true for my music love!! I remember my plain old school days when I used to listen songs on radio/walkman…..And now with such an amazing gadget, With its crystal clear sound quality one can listen audio/radio ,watch videos with great resolution, listen and subscribe to podcasts, store photos..I was just mad for some days ..finding out all of the features. specially listening “Rang De Basanti” songs (that too ‘masti ki pathshala’ and ‘rubarroo’) will be a treat for all music lovers ..for more details one can visit Apple site. In order to listen radio on iPOD, you need to attach external accessories ..you can also store the photos on your digicam to iPod..so no need of any external memory chips.. !!

There are 4 ways to handle error redirection
1) User < @%Page ErrorPage =”errPage.aspx” %>
2)Use PageError event handler to trap the errors on page. This overrides ApplicationError as well as web.config customErrors settings.
3) Use Application_Error event in Global.asax to handle application level errors
4) Use < customerrors > tag in web.config to handle the application error in a declarative way.

Server.GetLastError gives the details of last error and Server.ClearError clears the error and prevents the errors from continuing to Application_Error event.

If you want your application deployment to be unattended, create the bat(.bat) or commant(.cmd) file with following command:

1) Uninstall application with unattended mode
Msiexec /x (Guid of the Application) /quiet

2) Install application with unattended mode
Msiexec /I (Path to MSI) /quiet

…while performing a small proof of concept on setting up a SSL on web server, we gathered some basic info on SSL..

What is SSL
Secure socket layer is a protocol used to secure the channel between browser and web server. The main objectives of setting up a secure communication between client and server are authentication between client and server, ensuring data integrity and securing data privacy. In a typical N-tier architecture, a request from client flows through many layers through different channels. Some of them might be on intranet and some of them might be on internet. Depending upon the deployment scenerio, we must know which layer or channel we need to secure. There are different technologies like SSL, TLS (Transport layer security- more advanced version of SSL), and IPSec (Used to secure the data between two computers), RPC encryption, but the choice depends on transport protocol, end point technologies, environmental considerations etc. You can find the details about these things in the reference links provided at the end of the article.

In order to set up a SSL on your web server, following steps are required:
1) Creating a Web Application for which you need to implement the SSL
2) Creating certificate request and submitting to CA(Certificate Authority)
3) Getting certificate
4) Applying certificate to your web server
5) Setting up SSL and required resources for the site

Continued……

Pune user group and INETA(International .NET Association) celebrates community launch of SQL Server 2005, Visual Studio 2005 and BizTalk Server 2006.
Date: 4th February
For more details visit:
Worldwide launch
Pune user group