# Beginning ASP.NET Security | Beginners To Pro **URL:** \ **Category:** Tutorials & Methods\ **Tags:** ebook, programming\ **Created:** [December 6, 2020, 11:31am UTC](https://onehack.st/t/beginning-asp-net-security-beginners-to-pro/165142 "2020-12-06T11:31:34Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\ **Post date:** [December 6, 2020, 11:31am UTC](https://onehack.st/t/beginning-asp-net-security-beginners-to-pro/165142/1 "2020-12-06T11:31:34Z")
![-](https://onehack.st/uploads/default/original/3X/e/a/ea31577823dbb77ab1ee4c9a0e65011b023602dd.jpeg) **INTRODUCTION** **OVER THE PAST SEVERAL YEARS** , I’ve been regularly presenting on security in .NET at conferences and user groups. One of the joys of these presentations is that you know when you ’ve taught someone something new. At some point during the presentation, you can see one or two members of the audience starting to look very worried. Security is a diffi cult topic to discuss. Often, developers know they must take security into account during their development life cycle, but do not know what they must look for, and can be too timid to ask about the potential threats and attacks that their applications could be subjected to. This book provides a practical introduction to developing securely for [ASP.NET](http://ASP.NET). Rather than approaching security from a theoretical direction, this book shows you examples of how everyday code can be attacked, and then takes you through the steps you must follow to fi x the problems. This book is different from most others in the Wrox Beginning series. You will not be building an application, but rather, each chapter is based upon a task a Web site may need to perform — accepting input, accessing databases, keeping secrets, and so on. This approach means that most chapters can be read in isolation as you encounter the need to support these tasks during your application development. Instead of exercises, many chapters will end with a checklist for the particular task covered in the chapter discussions, which you can use during your development as a reminder, and as a task list to ensure that you have considered and addressed each potential fl aw or vulnerability. When you decide to test your applications for vulnerabilities, be sure that you run any tests against a development installation of your site. If you have a central development server, then ensure that you inform whoever manages the server that you will be performing security testing. Never run any tests against a live installation of your application, or against a Web site that is not under your control. Be aware that your country may have specifi c laws regarding encryption. Using some of the methods outlined in this book may be restricted, or even illegal, depending on where you live. **WHO THIS BOOK IS FOR** This book is for developers who already have a solid understanding of [ASP.NET](http://ASP.NET), but who need to know about the potential issues and common security vulnerabilities that [ASP.NET](http://ASP.NET) can have. The book does not teach you how to construct and develop an [ASP.NET](http://ASP.NET) Web site, but instead will expand upon your existing knowledge, and provide you with the understanding and tools to secure your applications against attackers. - INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . - CHAPTER 1 Why Web Security Matters . . . . . . . . . . . . . . . . . . - PART I THE [ASP.NET](http://ASP.NET) SECURITY BASICS - CHAPTER 2 How the Web Works . . . . . . . . . . . . . . . - CHAPTER 3 Safely Accepting User Input . . . . . . . . . . . . . . . . . . . . . - CHAPTER 4 Using Query Strings, Form Fields, Events, - and Browser Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . - CHAPTER 5 Controlling Information . . . . . . . . . . . . . . . . . . . . . . - CHAPTER 6 Keeping Secrets Secret — Hashing and Encrypton. . . . . . . . - PART II SECURING COMMON [ASP.NET](http://ASP.NET) TASKS - CHAPTER 7 Adding Usernames and Passwords . . . . . . . . . . . . . . . . . . - CHAPTER 8 Securely Accessing Databases . . . . . . . . . . . . . . . . . . . . . - CHAPTER 9 Using the File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . - CHAPTER 10 Securing XML . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . - PART III ADVANCED [ASP.NET](http://ASP.NET) SCENARIOS - CHAPTER 11 Sharing Data with Windows Communication Foundation . . . . . . . - CHAPTER 12 Securing Rich Internet Applications . . . . . . . . . . . . . . . . . . . . . . . - CHAPTER 13 Understanding Code Access Security . . . . . . . . . . . . . . . . - CHAPTER 14 Securing Internet Information Server (IIS) . . . . . . . . . . . . . . . . . - CHAPTER 15 Third-Party Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . - CHAPTER 16 Secure Development with the [ASP.NET](http://ASP.NET) MVC Framework . . . . . . . - INDEX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Go To **[Base64](https://www.base64decode.org/)** & Decode: `aHR0cHM6Ly9tZWdhLm56L2ZpbGUvS080bW1ZaFkjWkR1empJZTdRdmJrdmgyTTRSNFpaSklYVUJ1SUlVaVNNWUliYlVfbVNsaw==` **Happy learning!**