<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Casaba Security &#187; Development</title>
	<atom:link href="http://www.casabasecurity.com/blog/category/development/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.casabasecurity.com/blog</link>
	<description>Building and breaking software and robots</description>
	<lastBuildDate>Tue, 31 Aug 2010 18:27:09 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Microsoft CCI Framework for Deobfuscating .Net binaries. (Part 3)</title>
		<link>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries-part-3/</link>
		<comments>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries-part-3/#comments</comments>
		<pubDate>Thu, 18 Feb 2010 18:04:51 +0000</pubDate>
		<dc:creator>John Hernandez</dc:creator>
				<category><![CDATA[Code Review]]></category>
		<category><![CDATA[Debugging]]></category>
		<category><![CDATA[Development]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Nebulous]]></category>
		<category><![CDATA[Reverse Engineering]]></category>
		<category><![CDATA[Babel]]></category>
		<category><![CDATA[CCI]]></category>
		<category><![CDATA[Deobfuscation]]></category>
		<category><![CDATA[Microsoft]]></category>

		<guid isPermaLink="false">http://www.casabasecurity.com/blog/?p=188</guid>
		<description><![CDATA[Renaming parts of the assembly. So I promised this last week, but I&#8217;ve been busy on a new project. Below is some code that shows renaming of methods. This is a solution to renaming classes within namespaces. It iterates over each namespace renaming classes from class1 -&#62; classN. This is more useful for human readability [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries-part-3/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Microsoft CCI Framework for Deobfuscating .Net binaries.</title>
		<link>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries/</link>
		<comments>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries/#comments</comments>
		<pubDate>Wed, 03 Feb 2010 20:01:51 +0000</pubDate>
		<dc:creator>John Hernandez</dc:creator>
				<category><![CDATA[Debugging]]></category>
		<category><![CDATA[Development]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Reverse Engineering]]></category>
		<category><![CDATA[Babel]]></category>
		<category><![CDATA[CCI]]></category>
		<category><![CDATA[Deobfuscation]]></category>
		<category><![CDATA[Microsoft]]></category>

		<guid isPermaLink="false">http://www.casabasecurity.com/blog/?p=152</guid>
		<description><![CDATA[We had an issue recently crop up with an obfuscated .Net binary. I’ve been meaning to spend more time reversing .Net protected binaries so I start looking in it. Unfortunately everything I was reading on the forums and internet seemed difficult. Having recently read a little about Microsoft’s CCI framework, I thought this might be [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Getting Around Conditionally Banned APIs When Using Microsoft&#8217;s banned.h Header File</title>
		<link>http://www.casabasecurity.com/blog/2009/12/getting-around-conditionally-banned-apis-when-using-microsofts-banned-h-header-file/</link>
		<comments>http://www.casabasecurity.com/blog/2009/12/getting-around-conditionally-banned-apis-when-using-microsofts-banned-h-header-file/#comments</comments>
		<pubDate>Tue, 08 Dec 2009 23:42:28 +0000</pubDate>
		<dc:creator>Ramsey Dow</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[SDL]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[This code sample makes use of banned.h, a Microsoft-supplied header file that deprecates dangerous CRT functions. Microsoft also poisons these functions on UNIX if you include banned.h there. This is a Good Thing, but what about the fact that they banned strlen? The banned API page states: For critical functions, such as those accepting anonymous [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/12/getting-around-conditionally-banned-apis-when-using-microsofts-banned-h-header-file/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Preventing Security Development Errors: Lessons Learned at Windows Live by Using ASP.NET MVC</title>
		<link>http://www.casabasecurity.com/blog/2009/11/preventing-security-development-errors-lessons-learned-at-windows-live-by-using-asp-net-mvc/</link>
		<comments>http://www.casabasecurity.com/blog/2009/11/preventing-security-development-errors-lessons-learned-at-windows-live-by-using-asp-net-mvc/#comments</comments>
		<pubDate>Mon, 23 Nov 2009 21:42:45 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Code Review]]></category>
		<category><![CDATA[Development]]></category>
		<category><![CDATA[ASP.NET]]></category>
		<category><![CDATA[MVC]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Casaba had the opportunity to contribute to a new Microsoft paper regarding ASP.NET MVC security. It&#039;s online through the SDL pages, and here&#39;s the paper&#39;s direct link. A short summary of the paper follows. The SDL preaches &#039;secure by default&#039;. When Windows Live moved to ASP.Net MVC, they used that opportunity to build mitigations into [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/11/preventing-security-development-errors-lessons-learned-at-windows-live-by-using-asp-net-mvc/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>On the Importance of Good Developer Documentation</title>
		<link>http://www.casabasecurity.com/blog/2009/11/on-the-importance-of-good-developer-documentation/</link>
		<comments>http://www.casabasecurity.com/blog/2009/11/on-the-importance-of-good-developer-documentation/#comments</comments>
		<pubDate>Fri, 20 Nov 2009 19:01:27 +0000</pubDate>
		<dc:creator>Ramsey Dow</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[SDL]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Programmers rely on documentation. It&#039;s how we learn to use APIs. Misusing APIs is a leading source of vulnerability. You might think that documentation is a cure to this ailment. Unfortunately, as someone who has been in software development for a long time, I can tell you that documentation quality is not always what it [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/11/on-the-importance-of-good-developer-documentation/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Use the Source, Luke!</title>
		<link>http://www.casabasecurity.com/blog/2009/10/use-the-source-luke/</link>
		<comments>http://www.casabasecurity.com/blog/2009/10/use-the-source-luke/#comments</comments>
		<pubDate>Tue, 20 Oct 2009 19:35:13 +0000</pubDate>
		<dc:creator>Ramsey Dow</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[SDL]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[If there&#039;s one thing that I&#039;ve learned throughout the years as a programmer, it is not always safe to trust the documentation. In fact, there is an old saying, &#8220;Use the source, Luke!&#8221; When possible, you should do just that. While looking over the CERT Secure C Coding Standard I noticed the following recommendation: ERR30-C. [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/10/use-the-source-luke/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A Vim plugin for highlighting APIs banned by the Microsoft SDL</title>
		<link>http://www.casabasecurity.com/blog/2009/08/a-vim-plugin-for-highlighting-apis-banned-by-the-microsoft-sdl/</link>
		<comments>http://www.casabasecurity.com/blog/2009/08/a-vim-plugin-for-highlighting-apis-banned-by-the-microsoft-sdl/#comments</comments>
		<pubDate>Sun, 23 Aug 2009 01:03:46 +0000</pubDate>
		<dc:creator>Ramsey Dow</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[SDL]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[I do a lot of programming, so I live in my editor. I use Vim. If you also use Vim then I&#039;ve got something to share with you: a new syntax plugin that highlights function calls banned by Microsoft&#039;s Security Development Lifecycle (SDL). You can obtain the banned.vim syntax plugin from the Vim script archive. [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/08/a-vim-plugin-for-highlighting-apis-banned-by-the-microsoft-sdl/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Let me see that certificate a little more closely. Part 1 &#8211; Validating the Server&#8217;s Certificate</title>
		<link>http://www.casabasecurity.com/blog/2008/06/let-me-see-that-certificate-a-little-more-closely-part-1-validating-the-servers-certificate/</link>
		<comments>http://www.casabasecurity.com/blog/2008/06/let-me-see-that-certificate-a-little-more-closely-part-1-validating-the-servers-certificate/#comments</comments>
		<pubDate>Wed, 11 Jun 2008 01:42:04 +0000</pubDate>
		<dc:creator>Brian Lewis</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Certificate]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[If you are developing a client to a server service that communicates over SSL such as a Web Service then it is your job to ensure your server is the &#34;real deal&#34; and not some rouge server or man-in-the-middle. How do you do that? Validate the server&#39;s certificate. Make sure the certificate is for the [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2008/06/let-me-see-that-certificate-a-little-more-closely-part-1-validating-the-servers-certificate/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>It all comes back to the basics</title>
		<link>http://www.casabasecurity.com/blog/2008/04/it-all-comes-back-to-the-basics/</link>
		<comments>http://www.casabasecurity.com/blog/2008/04/it-all-comes-back-to-the-basics/#comments</comments>
		<pubDate>Tue, 29 Apr 2008 10:00:25 +0000</pubDate>
		<dc:creator>Samuel Bucholtz</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[SDL]]></category>
		<category><![CDATA[Consulting]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Recently there has been a lot of talk in the security community about the Flash ActionScript exploit written by Mark Dowd (http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf). I will not go into a breakdown of the exploit as others have already done a great job of blogging about it. What I would like to discuss is two big takeaways that [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2008/04/it-all-comes-back-to-the-basics/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using ASP.Net session handling with secure sites (set the secure flag)</title>
		<link>http://www.casabasecurity.com/blog/2008/02/using-asp-net-session-handling-with-secure-sites-set-the-secure-flag/</link>
		<comments>http://www.casabasecurity.com/blog/2008/02/using-asp-net-session-handling-with-secure-sites-set-the-secure-flag/#comments</comments>
		<pubDate>Mon, 04 Feb 2008 07:04:42 +0000</pubDate>
		<dc:creator>Samuel Bucholtz</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[ASP.NET]]></category>
		<category><![CDATA[cookies]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[One of the common problems we see with many web applications is reliance on ASP.Net sessionID without understanding the security ramifications. ASP.Net provides web developers with a powerful means of tracking user state and identity with very little coding. Rather than creating your own custom authentication cookie, handling the trickiness of forms auth or mapping [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2008/02/using-asp-net-session-handling-with-secure-sites-set-the-secure-flag/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
