Securing websites (ASP.NET)
The session covers how to secure a website, using ASP.NET for the demos. The main themes are input validation, user authentication and system security. It shows XSS and SQL injection attacks, explains hashing and salting passwords, and covers system security and the risks of using a DSN.
More background in the post Writing Secure ASP.NET session.
Given at
- April 2004: Hogeschool West-Vlaanderen, departement Simon Stevin
- November 2004: Computerclub HCC West-Vlaanderen
- March 2005: KTA-Handelsschool Aalst
Files
- Slides (PowerPoint) (166 KB)
- Demo application (195 KB)
You May Also Like
Keeping the Old Addresses Alive
Nobody migrates email in one day. Fetchmail, a receive-only alias domain, and permanent redirects bridge the old world into the new one.
Making Roundcube Not Look Like 2012
Webmail is the face of the platform, so it got a Gmail-shaped skin, real calendar and contacts integration, and some money spent on polish.
Email for a Nine-Year-Old
Family accounts on self-hosted infrastructure: onboarding, self-service passwords, 2FA, and what parental visibility looks like in Sieve.