Service Areas » App Security » Training » Application Security for .NET
 

Introduction to Application Security for .NET

Course Format: Instructor-led

Course Duration: 2 days

Course Description: Introduction to Application Security for .NET provides developers with a comprehensive look at developing secure web applications using the ASP.NET platform. Students are first led through the basics of secure application development to provide a fundamental understanding of the security implications of systems they are building. Then they are led through a number of interactive exercises where they attack a flawed web application. The implications of insecure coding and design practices are explained, and more secure practices, rooted in the .NET platform, are presented and discussed. The course is targeted toward software architects, developers and quality assurance personnel building software with the .NET platform as well as security professionals who want an in-depth understanding of threats to web-based applications.

Schedule

Day 1

  • Basic Security Principles
  • Elements of a Secure Design
    Authentication, Authorization and Data Confidentiality and Integrity
  • Threat Modeling
  • Web Proxy Introduction
  • Overview of Secure Session Management

Day 2

  • OWASP Top 10 Review
    1. Unvalidated Input
    2. Broken Access Control
    3. Broken Authentication and Session Management
    4. Cross-Site Scripting (XSS)
    5. Buffer Overflows
    6. Injection Flaws
    7. Improper Error Handling
    8. Insecure Storage
    9. Denial of Service
    10. Insecure Configuration Management
  • Deployment Configuration

For more information on this course, or to request training on another topic, contact Denim Group.