Web sites today face many threats to the confidentiality and integrity of the data used and the functionality provided by the application. This problem is compounded by the fact that Web developers are simply lack of either adequate knowledge and skills in writing secure Web application codes (Huang et al., 2005) or sufficient testing methodologies for the audit and control of Web development (Mansouir and Houri, 2006). Works in the design and implementation of security measures for Web applications are greatly in need.
Read the rest of this entry »

• 0 Comments

This paper briefly describes several common classes of coding error generally encountered when auditing web applications running on the Active Server Pages (ASP) platform. The paper is broken down into three broad sections, each of which addresses several common coding problems. The following is a list of the common errors that are discussed in this document, divided into three broad categories. The remainder of the document deals with each of these problems in turn. Any ASP code samples assume that the default language is VBScript, but all of the points apply equally to JavaScript. Equally, all occurrences of the SQL language assume that Microsoft SQL Server is being used as the back – end database.
Read the rest of this entry »

• 0 Comments

Foxit PDF IFilter is an application designed to help users to index a large amount of PDF documents and then quickly find text within these documents. The PDF documents can not only be files, but also email attachments or database records.

Foxit PDF IFilter supports PDF 1.7 specification and can be used in many Microsoft search engines, such as Windows Indexing Service, MSN Desktop Search, Internet Information Server, SharePoint Portal Server, Windows SharePoint Services (WSS), Site Server, Exchange Server, SQL Server and all other products based on Microsoft Search technology. With Foxit PDF IFilter, all these search engines can find PDF files with ease.
Read the rest of this entry »

• 0 Comments

Traditionally, Microsoft’s core business has been focused on the Windows platform and the Office suite. Windows and Office, by all means, continue to be the heart of Microsoft. The latest versions of the flagship products, Windows Vista and the Office 2007 System, made available to the public at the end of January 2007, have fueled the vast majority of the company’s most recent fiscal second quarter record financial results of $16.37 billion in revenue, and $6.48 billion in operating income. With Office SP1 out of the way at the end of 2007, Microsoft is currently building Windows Vista Service Pack 1, Windows XP Service Pack 3 and Windows 7 client platforms, as well as putting the finishing touches on Windows Server 2008.
Read the rest of this entry »

• 0 Comments

This How To shows you how to create and configure a custom least-privileged service account to run an ASP.NET Web application. By default, an ASP.NET application on Microsoft Windows Server 2003 and IIS 6.0 runs using the built-in Network Service account. In production environments, you usually run your application using a custom service account. By using a custom service account, you can audit and authorize your application separately from others, and your application is protected from any changes made to the privileges or permissions associated with the Network Service account. To use a custom service account, you must configure the account by running the Aspnet_regiis.exe utility with the -ga switch, and then configure your application to run in a custom application pool that uses the custom account’s identity.
Read the rest of this entry »

• 0 Comments

This IBM® Redpaper gives a example of procedures to restore the Microsoft® SQL 2000 and 2005 using SnapManager®.There are options discussed that depend on the type of disaster, the type of data recovery, and the type of system on which the disaster applies.
Read the rest of this entry »

• 0 Comments

Whether you want to build an AJAX-based web application, or a Windows game, the Academic Resource Kit is a great place to start. A Microsoft Romania initiative aimed at driving technology access and adoption, ARK is designed as a comprehensive collection of tools and resources addressing both the development and design aspects of building software solutions. I had the chance to chat with Microsoft Romania’s Todi Pruteanu about the ARK initiative, and the interview below will provide you with a great insight into the Academic Resource Kit.
Read the rest of this entry »

• 0 Comments

This manual was compiled by Project A Web Development as a project supported by Jim Teece. It was written by Ethan Townsend as a documented means of migrating our ADO ASP application, SIB (Site­in­a­box), from Microsoft SQL Server 7.0 to an open source database. SIB is a large database­ driven application that includes many views, stored procedures, and complex SQL executed from the ASP pages.
Read the rest of this entry »

• 0 Comments