Call : (+91) 968636 4243
Mail : info@EncartaLabs.com
EncartaLabs

Writing Secure Code - ASP.NET (C#)

( Duration: 4 Days )

In Writing Secure Code - ASP.NET (C#) training course, you will gain an understanding of the key security features of the .NET platform, the common web security pitfalls developers make, and how to build secure and reliable web applications using ASP.NET. You will work through hands-on code examples that highlight issues and prescribe solutions. You will also cover both the current version of the .NET framework and relevant security features in the .NET updates.

Upon completion of Writing Secure Code - ASP.NET (C#) workshop, delegates will learn:

  • The process and techniques of writing secure code
  • Effective authentication and authorization techniques
  • The most frequent web application vulnerabilities and how to avoid them
  • Secure user management systems
  • Data validation strategies
  • Effective error handling and exceptions management
  • Software security testing techniques

  • A comprehensive knowledge of the .NET framework, the C# language, and web technology is required.

This Writing Secure Code - ASP.NET (C#) class is for professional software developers or software security auditors who have been working with the .NET framework and developing ASP.NET web application using C# code for at least one year.

COURSE AGENDA

1

Introduction

2

.NET Platform Security

  • .NET Language Security Features
  • Strong Name Signing
  • .NET Common Language Runtime (CLR) Security Mechanisms
  • Code Access Security (CAS)
3

Advanced .NET Security

  • Concepts
  • Partial Trust ASP.NET
  • Code Access Security
  • Microsoft Windows CardSpace
4

Cryptography

  • .NET System Cryptography Namespace
  • Common Cryptographic Mistakes
  • Other Cryptographic Features in .NET
  • .NET Algorithm Recommendations
5

Authentication

  • ASP.NET Authentication
  • Forms Authentication
  • Windows Authentication/Kerberos
  • Code Signing (Authenticate)
  • Impersonation and Delegation
6

User Management

  • Password Storage and Quality
  • Account Lockout Schemes
  • Strategies for Password Reset
  • Membership API
7

Authorization

  • Access Control Models
  • Session Management
  • Common Authorization Flaws
  • Role Manager
  • ASP.NET/IIS Authorization
8

Data Validation

  • Input and Output Validation
  • Regular Expressions
  • SQL Injection, Cross-Site Scripting (XSS), and Other Attacks
  • Data Validation Controls and Libraries
  • Preventing Validation Attacks
  • Canonicalization Issues
9

Client-Side Security

  • Client-Side Security Mistakes
  • Licensing Schemes
  • Security Objectives for Thick Clients
  • Secure Code Protection
  • Reverse Engineering
  • Code Access Security on the Client
  • Byte Code Manipulation
  • Secure Design Patterns
10

Security Testing

  • White Box Techniques
  • Black Box Techniques
  • Unit Testing
11

Web Services

  • Web Services Risks
  • Web Service Attacks
  • Web Service Defense Techniques
  • Survey of Security Technologies
  • Windows Communication Foundation
  • Web Services Security Patterns
12

Error Handling and Exception Management

  • Exception Handling Patterns and Anti-Patterns
  • ASP.NET Exception Frameworks
  • Best Practices for Handling User Errors
13

Logging and Auditing

  • Common Mistakes with Logging
  • Logging Best Practices
14

Secure Code Review

  • Threat Modeling
  • Secure Code Review Methodology
  • Manual Code Review
  • Automated Code Scanning Tools
  • Practical Strategies for Conducting Code Reviews

Encarta Labs Advantage

  • One Stop Corporate Training Solution Providers for over 6,000 various courses on a variety of subjects
  • All courses are delivered by Industry Veterans
  • Get jumpstarted from newbie to production ready in a matter of few days
  • Trained more than 50,000 Corporate executives across the Globe
  • All our trainings are conducted in workshop mode with more focus on hands-on sessions

View our other course offerings by visiting https://www.encartalabs.com/course-catalogue-all.php

Contact us for delivering this course as a public/open-house workshop/online training for a group of 10+ candidates.

Top
Notice
X