Input / Output Methods And Validation (for Secure Coding) - Read/Write DB Encryption ?
May 16, 2011
I've been trolling for a long time now and have decided to register as I finally have some time to start jumping into VB. The last time I coded VB, the current version was VB 4. I've been out of programming for a good while now and considered myself a beginner (tutorial example coder haha).
My question is: Where is a good place to start learning VB.NET?
I know it's an often asked and answered question - but let me give you a bit more information so more specialized replies might be given.
I'm in INFOSEC/COMSEC and would like to (eventually) develop a program that contains a DB of information that is read by the application and saves input information into a DB (encrypted) as well. The program will be a 800-53 C&A control assessment program; used for tracking system compliance for federal information systems. I would like to be able to develop such a tool to make my life easier at work instead of using Excel spreadsheets to track everything.
I would like to learn:
- Input / Output methods and validation (for secure coding)
- Read/Write DB Encryption (RSA or other 128-bit) for user input information
- Ability to generate PDF reports from the primary keys and data sets from the above DB
My goal is to create a program that allows a user to install the program, setup a 'master' account that a serial/key has been generated for - that master account is then allowed to create new projects (progress saved in DB). A project asks the user certain questions pertaining to information systems and takes the input and saves it into the DB (encrypted). When the assessment is completed, I would like the program to be able to generate a PDF report from the DB (from a layout template I created).
I am writing a program which was pretty easier until I got to a certain part. I need to write a code that will let me input 2 alphabets and they will output in alphabetical order
Ex: Please Enter alphabet 1: b Please Enter alphabet 2: a
I am using a slightly modified version of this code. to create a mission critical application. That files that will be encrypted are very important. This has to be done from scratch because there are some other things that has to be done along with this. How secure is this? Its impossible to crack this encryption right? [Code]
I am trying to find some source code that is reputable such as code created by Microsoft or a similar entity that has released the source code for AES 128 encryption in the latest VB .net framework. My understanding of encryption methods is sufficient though, I am not an expert on the subject. The following source code [URL] on the MSDN network works very well in VB though with the advent of more secure AES encryption, I would like to be more prudent by using a more secure method. Unless someone can prove or explain that this source code is at a level of a "bank standard encryption" or better I would like to be pointed in the right direction of more secure code or advice from experts.
What would be the best way of storing data securely away from users. What I have is a stack of files that get downloaded by the program, at the moment they COME encrypted, and stored in a temp location. Now where would be the be place to store them, and how would I store them? The program reads normal unencrypted files but in order for me to open them at the moment I nee to decrypt them in the temp folder and open them from there.This is bad because anyone could find the temp folder and simply copy out all the unencrypted files.Opening the files and then decrypting the bytearray is out of the question because the program only takes a filename as a option.
Is there a way to encrypt/decrypt text (string form) in VB.net using another string as a key? Meaning, if one user encrypts using this key, the other user needs to decrypt using the same key?I do NOT mean public and private key encryption or anything of the sort.If not, what is the second best way to encrypt/decrypt data without public/private keys?I want to make a simple way to send messages securely.
I have set up a method in vb.net and in xcode for encrypting a string using as far as i can tell the same parameters for an AES encryption.I've looked all over the place but cannot find information on whether they use the same encryption algorithm and settings.
this is the vb.net code:
Dim encryptAES As New AesCryptoServiceProvider() Dim encoding As New UTF8Encoding() Dim encryptor As ICryptoTransform encryptAES.Key = encoding.GetBytes("12345678901234567890123456789032") encryptAES.IV = encoding.GetBytes("1234567890123416") encryptAES.Mode = CipherMode.CBC
I have a question in security programming. As all of us know, when we have a database with passwords or anything sensitive, we would like to encrypt it so it is not readable by other. Now I want to know, which of the method is secured or less secured. Is it Iterative Salting (1000x iterative) or Encryption method such as SHA 256, MD5, and all others. Kindly give me your opinion on this please.
I am working with a vb program, but there is something strange on one of my .vb code pagewhen i put the "dot" afther the object name its dont show the methods availables for this objectbut on other vb code pages i can see it. but in this one no.for exmaplethis is a piece of code: Dim sb As New StringBuilder()
I'm having to store a user account locally on a machine, what would be the best method to store this? (Needs to be reversable encryption rather than hash)I'm accessing a UNC share as mentioned here: url...Can anyone suggest a better method or changes to the above to secure the credentials as much as possible?
I have a newbie question hopefully the more experienced vb heads will be able to help me with, I have a command button which works like the following [code] I was thinking would it be possible to only run 'Code 4 if the messagebox.show has not appeared for Code 1, Code 2 and Code3?
I need some help with the input validation of my application. Attached is the code that I have written as well as a screenshot of the front end. I specifically need input validation to verify that the user selected input for cbLengthOfStay is a number between 1-10 as well as input validation to verify the user input for txtMedication, txtSurgicalCharges, txtLabFees and txtRehabilitation is a positive numerical number. Please feel free to critique my attached code. [Code]
im trying to build a form+attachment that needs to be send to email.Im using a VB background code (attachementemail.aspx.vb)and my front (b-16.aspx) I want the page to check that the user entered a email, name, phonenumber and attachment. what command do I put in the axp.vb and what on the .aspx tried just about anything.
I'm validating entities in EF4.1 with the On[Property]Changing partial methods in a VS2010 Winforms project. Example: OnJobNumberChanging(value As String) I throw an ArgumentException in them if 'value' violates a rule. When editing in a DataGridView which is bound to the results of an ObjectQuery, user clears the text in a cell bound to a property which is not nullable and tabs out. Code enters the partial method, exception is thrown.
I'm validating entities in EF4.1 with the On[Property]Changing partial methods in a VS2010 Winforms project.Example: OnJobNumberChanging(value As String)I throw an ArgumentException in them if 'value' violates a rule.When editing in a DataGridView which is bound to the results of an ObjectQuery, user clears the text in a cell bound to a property which is not nullable and tabs out. Code enters the partial method, exception is thrown.
Where then do I catch this exception? I am unable to find the correct event. Exception message is, "ArgumentException was unhandled by user code".
I'm a complete beginner to programming alone, let alone VB.net. What I need to do is encrypt a block of text inputted by a user using a keyword that will also be inputted by the user. This is all to be done using ciphertext, so naturally the user would be informed the keyword can not have any repeating characters. I figure the English alphabet will be predefined in capitals and lowercase, then the keyword will be read character by character, removing those characters from the alphabet array and then appending them to the end of it (to create the new encrypted alphabet). How to read the keyword character by character, and then removing the corresponding letter from the alphabet. The best I can think is to check each character of the keyword against each character of the array which I'm sure is much more work than I need to do.
I am executing this validation summary program in Visual web developer 2008 express edition, found the validation summary property is not visible in output.
<div><asp:ValidationSummary ID="sum1" runat ="server" ShowMessageBox="false" HeaderText="You details cannot be processed due to following errors:" DisplayMode="BulletList" ShowSummary ="true" Font-Names ="arial" Font-Size ="12"></asp:ValidationSummary> <asp:CompareValidator ID="cmp1" runat ="server" ControlToValidate ="txtname" Display="Dynamic" Operator="DataTypeCheck"
I have a form set up where users can enter their booking for a room at my college. I want to validate the user input to avoid SQL injection (my program uses a MS Access database) and also stop numbers and synbols in their name, etc.I can do the validation fine, but there is to be a lot of validation and then methods executed only if all validation tests come back as true. I did have something like this:
If txtName.Text = "" Then frmBookErr.SetError(txtName, "Name field cannot be left blank.") fail = 1 Else
[code]....
And then check the fail variable, but it obviously gets overridden later in the form if one of the validation tests come back as true.
There are a number of textboxes I would like to validate. I first set up the key press events to only allow key entry's of characters which I feel are valid for this location (i.e. numbers and "." for dollar amounts). But in addition to this I would also like to ensure that the user entered something valid using an input mask. This may be a simple question but I couldn't seem to find the answer to it. If I have a input mask of ###.## and the user enters something like 4321.23, would this throw an error and if so, how should I set up my mask large enough so the user is able to enter large amounts.
Alright, So ive returned to using vb after several years now. Ive programed in VB6.0 years ago and I was quite proficient at it. However after returning to vb (now using Visual Studio 2010). Either Ive forgotten everything, or something has changed. For a university project. Im trying to write a program that takes a string of bits and encrypts it using DES Encryption.
I am creating a form for our new intranet and I need to have validation on a number of the fields.When I use the Visual Studio textbox it doesn't render the input out as I would have hoped.t adds large amounts of text to the value and name and most importantly it doesn'tclose the input with a forward slash - How do I get the text boxes to add this trailing forward slash and produce validating XHTML input fields?
I have one textbox basically the user is going to enter in a 9 digit number or letters. From there I want to have a buttonclick event that validates this against 2 columns in a MSSQL Database. First to check if the number exists, next to check if it is active or inactive.
There are about 27000 rows of numbers so my main question is what is the best approach to handling something like this.
Should I create a view and validate in the click event. Should I create a stored procedure in sql that takes an input parameter and call it in the click event.
I was also reading about storing the information in a dataset however with that many records i am assuming that is going to be a slow process.
The system we have in place at work for call centre agents to input telephone numbers doesn't validate their input, so, in a lot of cases, we have junk data being entered (0000000000 as a phone number generally). I've been taked with fixing this, but I'm not sure how to stop the agents entering junk like this.
You have failed to give me "Staring Point".If you don't give me "Staring Point" the program will terminate.I'd like to terminate the entire program based on dialogresult. Do I just kill my main form or is there a line I can put in there to exit program?
I have text box where scores are to input between 0 and 100, they user also needs the option to enter a text word such as bye or BYE. I having problems getting the validation to work here is what i have so far please let me know what I'm doing wrong.
I have code that will validate whether or not the input is numerical. After that's passed validation, I need to check and see if that value is greater than another.
Here's the code for the numerical validation (it works) If Decimal.TryParse(EndOdometerTextBox.Text, EndOdometerDecimal) Then ErrorProvider1.Clear() Else ErrorProvider1.SetError(EndOdometerTextBox, _ "Please enter a numeric value.") EndOdometerTextBox.SelectAll() e.Cancel = True
Now, I need to verify that the input for this is greater than another decimal (BeginOdometerDecimal). How can I do this? Everything I've tried fails completely (ignored) or messes up the fist validation.
i have been working on a GUI to export verification data to a text file. I have it set up to work at home but I would like to adapt the code so that it will write the text file to the directory that I use at work also. I have the areas commented out where things that I have attempted do not work.
