ASP.NET Security Secrets Revealed

By Troy Hunt
ASP.NET Security Secrets Revealed is all about looking at a broad range of security features within the framework in small bites of easily consumable information.
Course info
Level
Intermediate
Updated
Jan 7, 2014
Duration
3h 24m
Table of contents
Introduction
Introduction 4m
Configuration
Setting up the Sample App 3m Enabling Custom Errors 4m Setting a Default Redirect Error Page 2m Configuring the Redirect Mode 1m Persisting Sessions in Cookies and URIs 7m HTTP only Session Cookies 2m Changing the Session Cookie Name 1m Enabling and Using Tracing 4m Request Validation 3m Securing Content using the Location Element 2m Hiding the ASP.NET Version Number 3m Defaulting Cookies to HTTP Only 3m Defaulting Cookies to Secure 4m Enabling Retail mode on the Server 3m The maxRequestLength Setting 2m About Unsafe Header Parsing 3m Summary 2m
Membership, Identity and Roles
Understanding Membership and Identity 3m Creating a Visual Studio 2012 Project 2m The Forms Authentication Auth Cookie 2m Persisting Accounts in the Database 1m Forms Authentication Timeout 2m Cookieless, Requiring SSL, HttpOnly and Cookie Name 2m Sliding Expiration 2m The Protection Setting 2m Configuring Membership 5m Roles 4m Role Storage 4m Summary 2m
MVC
Automatic Output Encoding 5m Html.Raw Helper 3m AllowHtml Attribute 5m Anti Forgery Tokens 6m Authorise Attribute 3m AllowAnonymous Attribute 2m RequireHttps Attribute 3m HTTP verb Tampering 4m Summary 2m
Web Forms
Understanding view State 5m View State MAC Protection 3m View State Encryption 5m Output Encoding in Controls 9m CSRF protection 7m Enabling Unvalidated Requests 5m Event Validation 9m The ViewStateUserKey 5m Summary 2m
General Security Principles and Tools
Manual HTML Encoding 3m CSS and JavaScript Encoding with AntiXSS 7m Creating Custom Response Headers 4m Encrypting Connection Strings 5m Creating Trusted Connections 3m The Security Implications of ELMAH 4m NWebsec 2m ASafaWeb 6m Summary 3m
Description
Course info
Level
Intermediate
Updated
Jan 7, 2014
Duration
3h 24m
Description

ASP.NET is full of little nuggets of security goodness, often doing their work in the background without you even noticing and other times secreted away within obscure corners of the framework. This course is about building familiarity with the breadth of framework features after which the developer can go off and build further knowledge through existing Pluralsight courses that really drill deep into the detail.

About the author
Troy Hunt
About the author

Troy Hunt is a Microsoft Regional Director and MVP for Developer Security. He's a regular conference speaker, frequent blogger at troyhunt.com and is the creator of the data breach notification service known as “Have I Been Pwned”.

More from the author
Managing the Modern Software Dependency Ecosystem
Intermediate
29m
Dec 21, 2018
Adapting to the New Normal: Embracing a Security Culture of Continual Change
Beginner
38m
Sep 6, 2018
Modern Browser Security Reports
Beginner
58m
Aug 3, 2018
More courses by Troy Hunt

You're the smartest person in the room

PROVE IT

Your team won't just close the skills gap

THEY'LL HURDLE IT