.NET
The two-day course is designed to implement security as a culture amongst the developers and will also include two main components:
– A review of the secure coding guidelines for .Net
– As well as .Net specific features like anti-XSS library
This highly practical, interactive course will focus on secure coding techniques and methodologies that can be immediately applied in your applications. The class uses real-world examples, walking through real code samples, using live, feature-rich applications, and showing how to hunt down, debug, and mitigate these flaws through better coding practices.
Benefits
– Illustrate how Web applications are attacked by hackers
– Show how these attacks work
– Show coding mistakes that make you vulnerable to attacks
– Demonstrate how to make your code secure
Who Should Attend
.NET developers, architects, QA staff
Duration
Available as a two-day workshop
Prerequisites
– Must understand .NET framework and ASP.NET programming
– Familiarity with Web application development (HTML, .NET framework)
– Comfort with Visual Studio
– Familiarity with IIS
– Familiarity with encryption and SSL is helpful, but not required
Structure
A combination of theory, practical examples, and hands-on training.
Contact
WhiteHat Security also offers on-site education sessions for groups of 20 or more. Public courses are also available to individuals in cities across the country. To find out more about WhiteHat Education Services course curriculum, contact our corporate office at 408.343.8300.
Download a course overview ::  (162K PDF) ›››
|
Course Overview – .NET
Defining the Attacks
Inherent Problems and Limitations of Internet Architecture
– HTTP request/response flow
– Session management
– Cookies
– Encoding/decoding URLs, character sets,
and HTML entities
Looking at Vulnerabilities in the Code
– How people exploit Web applications
– Why you can never trust anything that
comes from the client
Components of Writing Secure Code
– Input handling
– Authentication and session management
– Access control/authorization
– Exception handling and logging
– Encryption
– .NET framework libraries
– Bypassing business logic flow
For Each Area, the Course will Cover:
– Theory and basics
– Recommended security practices
– “Gotchas” and implementation concerns
– Example exploits
– Hands-on exercises
|
