Thursday, July 8, 2010

August Meeting Announcement

Defensible .NET

ASP.NET and the .NET framework have become a preferred foundation underlying enterprise applications. While Microsoft has prioritized integrating security into the ASP.NET framework, attacks at the application layer are dramatically increasing. How effective are the security controls built into the ASP.NET framework? Application architects must understand the limitations of the framework and ensure that code is secure. Focusing on the OWASP top ten, Jason Montgomery will explain the latest defensive techniques specific to the ASP.NET environment, and discuss the importance and challenges of building security into the organization’s software development lifecycle.

About the speaker

Jason Montgomery is Sr. Security Specialist at Active Technologies Group, Inc. (ATGi). He is a SANS instructor in .NET application security and co-author of the secure coding certification, GSSP.NET. Jason has spent the past five years guiding software security practices at the Department of Defense, and currently leads ATGi’s secure software development and assessment practice.

Location

The presentation will be on Tuesday, August 3rd, at 6:00 p.m, at ICC, 2500 Corporate Exchange Drive, Suite 310, Columbus, OH 43231, on the third floor. The meetings are always free, and we usually give away books and other door prizes.

Tuesday, July 6, 2010

Friday, July 2, 2010

Reminder: Creating a Data Model for Your Enterprise

Want to cripple business agility and make developers miserable? A poorly-designed and maintained data model will do all that and more. If you'd prefer to build a maintainable data architecture, come hear Jason Tiret present "Modeling for Your Enterprise" this coming Tuesday, July 6, at 6:00 p.m.

Friday, June 4, 2010

Jason Tiret Presents Modeling for Your Enterprise on July 6

Most small to medium organizations place a premium on development and deliverables rather than documentation and architecture. While this may be great to get the business started, things can quickly spiral out of control as new systems are put in place.

Jason Tiret, Director of Modeling and Architecture Solutions for Embarcadero Technologies, will be the featured presenter for the July meeting of the Columbus Architecture Group. This session will teach the user how to build a practical data architecture strategy from the ground up!

Jason's presentation, called "Modeling for Your Enterprise," will include the top 5 best practices for using data models to capture metadata effectively and support key enterprise initiatives such as Business Intelligence, Data Architecture, Data Warehousing, Governance and Compliance, and SOA. Jason lives in California and will be presenting and answering questions via LiveMeeting, just for Columbus Architecture Group.

The presentation will be held Tuesday, July 6, at 6:00 p.m, at ICC, 2500 Corporate Exchange Drive, Suite 310, Columbus, OH 43231. The meetings are always free, and we usually give away books and other door prizes.

Friday, May 28, 2010

June 1 Meeting: Can Developers and Management to See Eye to Eye on Nonfunctional Requirements and Technical Debt?

Deciding between spending development time working on flashy new features, paying back technical debt, or implementing so-called "nonfunctional requirements" can be a source of tension between developers and business managers. Some authors suggest ways to argue in favor of paying back technical debt.

Of course, sometimes it's appropriate to take on technical debt or defer working on nonfunctional changes. Architects can do better than just being ready to counter arguments against spending time on these issues when they come up. Well-managed technical debt is part of a software design. A good architect needs to consider technical issues in light of business needs. Not surprisingly, visibility and communication are the keys to doing this successfully.

On Tuesday, June 1, at 6:00 p.m., at ICC, 2500 Corporate Exchange Drive, Suite 310, Columbus, OH 43231, we'll examine this issue in more depth. How can a team leader bridge communication gaps between developers and business management? What are effective ways of managing nonfunctional requirements? When does it make sense to take on technical debt, and why?