Uncategorized

Performance: High CPU–The Case of Lack Of Caching And Dynamically Generated JavaScript Files
By February 24, 2014 2 Comments Read More →

Performance: High CPU–The Case of Lack Of Caching And Dynamically Generated JavaScript Files

During the latest load test we observed high CPU in our front end SharePoint servers. The servers host custom pages and under increasing load we observed ever increasing CPU utilization. The correlation was quite obvious – the higher the load the higher CPU utilization. We couldn’t get to the target load since at some point […]

Posted in: Uncategorized
Script: Validate Assembly’s SNK Using PowerShell
By February 24, 2014 0 Comments Read More →

Script: Validate Assembly’s SNK Using PowerShell

SNK (Strong Name Key) is a digital proof of .Net assembly’s origin, normally it proves it belongs to your company. If it’s important for you to be sure your customers using your assemblies and that the assemblies are not replaced by rogue ones consider signing your assemblies with SNK. More benefits of SNK discussed in […]

Posted in: Uncategorized
Script: Validate File’s Authenticode Signature Using PowerShell
By February 24, 2014 0 Comments Read More →

Script: Validate File’s Authenticode Signature Using PowerShell

Authenticode digital signatures provide means of verifying the code’s origins. When you ship your production files consider signing them with Authenticode, even those .Net assemblies that you already signed with SNK (Strong Name Key, more on SNK here). Digital signatures such as Authenticode and SNK help mitigate attacks when legitimate files replaced with rogue files. […]

Posted in: Uncategorized
Script: Verifying File’s Copyright Using PowerShell
By February 24, 2014 0 Comments Read More →

Script: Verifying File’s Copyright Using PowerShell

When you ship your software you want to make sure the binaries have proper copyright attributes set. Below is a PowerShell script that extracts the file copyright attribute. Hat tip to June (@juneb_get_help) who helped me with it. To verify the files copyright attribute: Copy and paste the script into Notepad and save with ps1 […]

Posted in: Uncategorized
Agile Security: User Stories
By February 24, 2014 0 Comments Read More →

Agile Security: User Stories

Applying agile development practices to security gains all the benefits (and challenges too) that come with agile. Namely, it’s the ability to build manageable backlog of work items, delivering working software incrementally in the context of the security, ability to quickly prioritize and deprioritize what gets kept on the hot plate and what is not, […]

Posted in: Uncategorized