Using WS-* for authentication is becoming increasingly popular, even outside the .Net world. WIF helps developers implement a claims based system for authentication and authorization. There will be two main sections in this presentation.

1. Ten thousand foot view of claims based authentication and authorization. Not just for developers! Network administrators, business analysts, PM's, anyone involved in software solutions will benefit from Part 1.
2. Creating a couple VS projects implementing claims based authentication using WIF

Joe McGurkin is currently a Solution Architect at LiquidHub responsible for architecting SharePoint extranet and intranet enterprise solutions. He was a software engineer at an insurance company Developing ASP .Net and Silverlight applications for insurance agents. His development included SOA utilizing WCF, Silverlight and Entity Framework. Joe also worked for a IT consulting company in Philadelphia with projects covering a broad range of technologies, from point of sale integrated into SharePoint to custom web applications for BI.

In less than 15 minutes we will create a stored procedure that utilizes the SQL 2008 Merge statement and map it with Entity Framework 4; allowing you to use modern code while keeping the old school DBA’s happy.

Security is an afterthought with most developers. A common problem is that most web applications can be easily hacked. This presentation explores the most common attacks on web applications, how they work to exploit your app, and most importantly, how to protect against them. Techniques such as Cross Site Scripting, SQL Injection, Session Hijacking, and Cross Site Request Forgery will be covered. ASP.NET Web Forms and ASP.NET Model-View-Controller (MVC) will be covered, as both have pros and cons that will be explored. We will start with a 'broken' application and secure it throughout the presentation. Learn about the various tools, techniques, and libraries to help protect your applications!

Adam Tuliper is a software architect with Cegedim and has been developing software for over 16 years. He started his work in security and reverse engineering (x86 based - pre .NET) with the direction of going into the software protection and anti-piracy field. He has been deeply involved in .NET internals since early .NET beta and currently works extensively with WCF, ASP.NET, SQL Server, MVC, C#, jQuery, and Silverlight. Adam is an INETA Community Speaker and regularly speaks at .NET User Groups. Besides development, he has performed security audits and penetration testing for large and small companies alike.