For .NET developers, application security often comes down to implementation details. Attack and remediation examples explore injection, certificate validation, cryptographic choices, XML processing, file paths, cross-site scripting, deserialization, and third-party components. Learners connect each risk to .NET controls and review practices they can consider in software they build or maintain.

Participants of this course will learn about the following vulnerabilities in .NET…

• HTTP Header Injection
• OS Injection
• SQL Injection
• Insufficient Certificate Validation
• Use of Insecure Ciphers
• Use of Insecure Digests
• XML External Entities
• Directory Traversal
• Cross-Site Scripting
• Insecure Deserialization
• Using Components with Known Vulnerabilities