Building Secure ASP.Net Applications

Prerequisites

Participants should be experienced ASP.Net developers.  This course is conducted in C#, however VB.Net participation is acceptable.

Description

This course guides the participant through the top ten security vulnerabilities of ASP.Net websites.  Using the OWASP project top ten list, this course explains the vulnerability, provides samples of the flaw, provides solutions to protect the application, and provides tests to check site security. 

Outline/Table of Contents

Overview of the OWASP Project

Top Ten

        Cross Site Scripting

        Injection Flaws

        Malicious File Execution

        Insecure Direct Object Reference

        Cross Site Request Forgery

        Information Leakage & Improper Error Handling

        Broken Authentication and Session Management

        Insecure Cryptographic Storage

        Insecure Communications

        Failure to Restrict URL Access