http://msdn.microsoft.com/virtuallabs/Microsoft Virtual Labs allow you to either quickly evaluate or learn how to build great applications for Windows and the Web, through a series of guided, hands-on labs which can be completed in 90 minutes.(c) 2007, Microsoft, Inc. All rights reserved.20After completing this lab you'll be better able to: 1) Understand cross-site scripting vulnerabilities; 2) Understand mitigations to help reduce the risk from cross-site scripting attackshttp://go.microsoft.com/?linkid=966414428c8f655-e3a1-442c-aaf5-6ec4a6212093Thu, 30 Apr 2009 12:56:48 GMTAfter completing this lab you'll be better able to: 1) Understand how malicious users may exploit a stack-based buffer overflow vulnerabilityhttp://go.microsoft.com/?linkid=9664141928a9a89-3a07-4b03-bb0f-0dc3cdb8b6e0Thu, 30 Apr 2009 12:40:15 GMTAfter completing this lab you'll be better able to: 1) Use Microsoft FxCop to analyze .NET Framework assemblies; 2) Use Microsoft PREFast to analyze C/C++ source code; 3) Use Microsoft Visual Studio Code Analysis feature to analyze source code; 4) Use the Microsoft ASP Source Code Analyzer for SQL Injection to analyze ASP codehttp://go.microsoft.com/?linkid=9664142f25188cd-933c-4a9e-8241-1ac71b136b6cThu, 30 Apr 2009 12:50:22 GMTAfter completing this lab you'll be better able to: 1) Use the /GS buffer overflow compiler defense to reduce the risk from stack-based buffer overflow attackshttp://go.microsoft.com/?linkid=96641438871aa62-61e4-4bcc-8783-0a4f4c1723feThu, 30 Apr 2009 12:54:43 GMTAfter completing this lab you'll be better able to: 1) Understand the process of file format fuzz testinghttp://go.microsoft.com/?linkid=9664145ea532d75-a006-4c2d-bc5f-8737adbdcd5dThu, 30 Apr 2009 12:58:31 GMTAfter completing this lab you'll be better able to: 1) Understand the need for security code review as a supplement to other security assessment techniques, such as using code analysis toolshttp://go.microsoft.com/?linkid=96641468e7cf620-876b-414c-9fb1-61f41707792aThu, 30 Apr 2009 13:00:39 GMTAfter completing this lab you'll be better able to: 1) Use Source Code Annotation Language with the Microsoft Visual Studio code analysis feature; 2) Use Source Code Annotation Language with Microsoft PREFasthttp://go.microsoft.com/?linkid=9664147b2992c53-d6e1-4bd6-b207-edc4f10c2595Thu, 30 Apr 2009 13:10:18 GMTAfter completing this lab you'll be better able to: 1) Use parameterized SQL queries to reduce the threat of SQL injection attacks; 2) Understand the impact of SQL injection attackshttp://go.microsoft.com/?linkid=966414813391020-bea1-4919-9e27-f63f0b0093c1Thu, 30 Apr 2009 13:13:12 GMTIn this lab you will learn: 1) Tools and techniques for writing secure code; 2) New runtime security checks for detecting buffer exploits; 3) Fundamental design principles for building secure applicationshttp://go.microsoft.com/?linkid=46233695aba438c-31b0-4176-8325-24d1b2842162Tue, 20 Jun 2006 08:00:00 GMTIn this lab you will learn: 1) Fundamental design principles for building secure applications; 2) Technologies such as FxCop and code access security; 3) To build secure applications using various tools and techniqueshttp://go.microsoft.com/?linkid=4623368f022d7d3-e120-4f62-b605-59cc2ae3812dTue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Secure Web Services with UsernameToken; 2) Automate Security with Policies; 3) Optimize Security with Secure Conversationhttp://go.microsoft.com/?linkid=4267485fe338a91-05f5-499c-bca9-303dc6164058Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Secure Web Services with UsernameToken; 2) Automate Security with Policies; 3) Optimize Security with Secure Conversationhttp://go.microsoft.com/?linkid=426731424713972-70c2-472c-abec-961285ce2359Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Publish and manage a Web Server; 2) Configure ISA Server to allow outbound web access; 3) Configure ISA Server to allow ICMP network traffichttp://go.microsoft.com/?linkid=42674394605ba82-32eb-4f3b-a62d-f646a8dc45a2Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Configure a client computer on the Internet to establish a VPN connection; 2) Configure VPN Quarantine on ISA Server; 3) Create and distribute a connection manager profile; 4) Configure ISA Server to accept incoming VPN connectionshttp://go.microsoft.com/?linkid=42673951c21669f-95f8-4d99-9e18-2a1b514d06c1Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Monitor the ISA Server; 2) Manage Multiple Networks; 3) Check Connectivity from the ISA Server; 4) Explore the New User Interfacehttp://go.microsoft.com/?linkid=433611382af84c1-8e17-4bea-84f7-09302015cf03Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Configure SMTP relay restrictions to restrict specific users; 2) Configure inbound recipient filtering; 3) Configure the front-end server to only accept inbound mail from users in the directoryhttp://go.microsoft.com/?linkid=4267365844c3cca-e5a9-461c-9037-29cbbc4324d1Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Scan computers by using SMS 2003.; 2) Manage security update distribution by using SMS 2003.http://go.microsoft.com/?linkid=4267489a49e24f3-531d-47e9-8b73-7a76f5d9f82dTue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Scan computers for missing security updates.; 2) Install security updates by using Windows Update.; 3) Distribute and install security updates by using SUS and Automatic Updates.http://go.microsoft.com/?linkid=42674568b11041f-a0d6-4e22-8b8f-28c62ac2b411Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Supersede templates already in use; 2) Create new certificate templates; 3) Copy existing templateshttp://go.microsoft.com/?linkid=4267454327f6342-b730-4e3e-9b15-09f868f5c0f6Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will: 1) Configure a network in which a server computer accepts only authenticated communications initiated from domain member computers that are members of a specific security group; 2) Configure a network in which isolated domain member computers accept only authenticated communications initiated from other domain member computershttp://go.microsoft.com/?linkid=426750412259f1b-87dc-4021-b8da-097bc5dbe5edTue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Review domain and domain controller policies; 2) Configure account policies for an Organizational Unit; 3) Configure auditing for object access and files and folders; 4) Configure software restriction policyhttp://go.microsoft.com/?linkid=42674677536a5fd-b950-447b-97d1-a00a62c7f20eTue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Monitor IP security; 2) Create a security template; 3) Import security templates into Group Policy Objects (GPOs); 4) Create and apply an IP security policyhttp://go.microsoft.com/?linkid=42674681f87f367-ae74-4613-833b-d34157edc91dTue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Configure the Remote Access Server (RAS) for quarantine; 2) Connect to a RAS server from a client; 3) Use NAT and RRAS basic firewall; 4) Install the IPSec computer certificateshttp://go.microsoft.com/?linkid=42673859a9d3fd2-e046-4eda-94d1-61042bf5eb53Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Explore the performance enhancements of Outlook 2003; 2) Install remote procedure call (RPC) over Hypertext Transfer Protocol (HTTP); 3) Test Microsoft Outlook over a secure Hypertext Transfer Protocol (HTTP) connection; 4) Explore the new features of Outlook 2003 when used with Exchange Server 2003http://go.microsoft.com/?linkid=42673664266e56d-c9ac-4ba1-a4c2-dcc5414349c3Tue, 20 Jun 2006 08:00:00 GMTIn this lab, you will learn to: 1) Manage SP2 Using Windows Security Center; 2) Add an MSI File to a GPO; 3) Explore Windows Firewall New Security Featureshttp://go.microsoft.com/?linkid=42674905c154007-d737-492c-b62d-91ad3f771b36Tue, 20 Jun 2006 08:00:00 GMT