Secure Coding with OWASP in ASP.NET Core 6

Focused View

Gavin Johnson-Lynn

4:38:28

168 View

1. Course Overview

1. Course Overview.mp4

01:54

2. Secure Coding with OWASP Resources

1. Introduction to OWASP.mp4

05:18

2. OWASP ASVS.mp4

06:20

3. OWASP ASVS - Architecture.mp4

08:03

3. Authentication

1. ASP.NET Core Identity.mp4

04:41

2. Demo - Implement User Authentication.mp4

05:43

3. Password Hashing.mp4

03:39

4. Demo - Password Strength Policy.mp4

02:00

5. Demo - Sign-up and Account Confirmation.mp4

03:16

6. Demo - Password Reset.mp4

01:18

7. Demo - Two-factor Authentication.mp4

03:35

8. Demo - Rate Limiting Failed Logins.mp4

02:27

4. Session Management

1. ASP.NET Core Sessions.mp4

05:08

2. Demo - Cookie-based Session Parameters.mp4

05:16

3. Demo - Step-up Authentication.mp4

04:20

4. Demo - Logout.mp4

03:31

5. Access Control

1. ASP.NET Core Authorization.mp4

06:38

2. Demo - Role-based Access Control.mp4

03:45

3. Demo - Claims-based Access Control.mp4

04:45

4. Demo - Rendering UI Based on Level of Access.mp4

03:15

5. Preventing Cross-site Request Forgery (CSRF) Attacks.mp4

05:42

06. Securely Handling Input and Output Data

01. Input Validation.mp4

06:10

02. Demo - Input Validation.mp4

06:05

03. Demo - Redirect URL Validation.mp4

01:54

04. Encoding Output Data.mp4

03:11

05. Demo - Invoking Encoders in Code.mp4

02:54

06. Injection Attacks.mp4

07:54

07. Demo - Prevent SQL Injection Attacks with Entity Framework Core and ADO.NET.mp4

03:16

08. Demo - Prevent Operating System (OS) Command Injection.mp4

02:16

09. Insecure Deserialization.mp4

04:48

10. Demo - Prevent XML External Entity (XXE) Aattack.mp4

03:38

07. Protecting Sensitive Data

01. ASP.NET Core Data Protection.mp4

07:45

02. Demo - Encrypt and Decrypt Sensitive Data.mp4

03:12

03. Demo - Secrets Management.mp4

06:01

04. Protecting Data in the Browser.mp4

08:04

05. Demo - Send Sensitive Data in HTTP Request Body.mp4

02:57

06. Demo - Prevent Data from Being Cached in the Browser.mp4

02:50

07. Data Privacy.mp4

03:49

08. Demo - Implement Export and Deletion of Personal Data.mp4

03:46

09. Protecting Data in Transit.mp4

02:20

10. Demo - Enforce Use of HTTPS Protocol.mp4

03:13

11. Demo - Secure TLS Configuration for Outbound Network Connections.mp4

02:43

8. Secure Error Handling and Logging

1. ASP.NET Core Logging and Exception Handling.mp4

07:24

2. Demo - Redact Sensitive Information Before Logging.mp4

03:18

3. Demo - Log Relevant Security Events.mp4

04:01

4. Demo - Prevent Leaking Sensitive Information through Error Pages.mp4

02:05

9. Managing Vulnerable Dependencies

1. Risks from Dependencies.mp4

05:00

2. Demo - NuGet Packages.mp4

02:52

3. Demo - Find Vulnerable and Deprecated Dependencies.mp4

01:57

4. Demo - Generate Sub-Resource Integrity (SRI) Hashes for JavaScript.mp4

04:09

10. Protecting the Business Logic

1. Business Logic Flaws.mp4

05:56

2. Demo - Protecting Business Logic Integrity.mp4

03:08

3. Demo - Protecting Business Logic Flows.mp4

04:17

4. Demo - Implement Rate Limiting.mp4

03:08

11. Handling Untrusted Files

1. Handling Files in ASP.NET Core.mp4

07:26

2. Demo - Prevent Large File Upload.mp4

02:07

3. Demo - Scan Uploaded Files for Viruses and Malware.mp4

02:42

4. Demo - Securely Store Uploaded Files.mp4

03:30

5. Preventing Server-side Request Forgery (SSRF) Attacks.mp4

02:27

6. Demo - Prevent SSRF Attacks.mp4

03:05

12. Hardening Configuration

1. Hardening ASP.NET Core Applications.mp4

03:13

2. Demo - Disable Debugging Facilities.mp4

02:19

3. Demo - Hide System Component Information.mp4

01:36

4. Demo - Validate HTTP Request Headers.mp4

01:54

5. Demo - Set HTTP Security Headers in Responses.mp4

03:08

13. API Security

1. Web Application Security Versus API Security.mp4

07:19

2. Demo - Using Bearer Tokens.mp4

05:16

3. Demo - Implementing CORS.mp4

03:25

4. Course Summary.mp4

02:26

Description

ASP.NET Core 6 is used to build mission critical applications handling sensitive data. This course will teach you how to implement the most common security requirements and defenses recommended by OWASP in your ASP.NET Core 6 applications.

What You'll Learn?

Developers use ASP.NET Core 6 to build applications with stringent security requirements and rely on OWASP resources to learn how to do it. In this course, Secure Coding with OWASP in ASP.NET Core 6, you’ll learn to create more secure Web apps on the .NET platform using OWASP resources. First, you’ll explore authentication and authorization. Next, you’ll discover how to securely handle input and output data. Finally, you’ll learn how to protect sensitive data and harden your application. When you’re finished with this course, you’ll have the skills and knowledge of ASP.NET Core 6 secure coding techniques needed to protect your users and applications.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

ASP.NET Core

Gavin Johnson-Lynn

Instructor's Courses

Gavin has 20 years’ experience writing software in regulated environments and for global organisations. The last five years of his development career were spent with a focus on security, becoming the security lead for a significant payments project at a FTSE 100 company. He has experience with languages from COBOL to .Net and now often finds those skills useful when developing with Python. Gavin's experience of software security revealed a passion for security, leading him to become a speaker and blogger on the subject. Gavin holds the Certified Secure Software Lifecycle Professional (CSSLP) and Scrum Master certifications and is currently part of an offensive security team, using his defensive knowledge to aid offensive security work.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.