C# and Web Application Security

Nature of security

What is the risk?

IT security vs. secure coding

From vulnerabilities to botnets and cybercrime

A1 - Injection

A2 - Broken authentication

A3 - Sensitive data exposure

A4 - XML external entity (XXE)

A5 - Broken access control

A6 - Security misconfiguration

A7 - Cross-Site Scripting (XSS)

A8 - Insecure deserialization

A9 - Using components with known vulnerabilities

A10 - Insufficient logging and monitoring

JavaScript security

Same Origin Policy

Cross Origin Resource Sharing (CORS)

Clickjacking

XSS in AJAX

Script injection attack in AJAX

Exercise – XSS in AJAX

XSS protection in Ajax

Exercise CSRF in AJAX – JavaScript hijacking

CSRF protection in AJAX

New XSS possibilities in HTML5

HTML5 clickjacking attack – text field injection

HTML5 clickjacking – content extraction

Form tampering

Exercise – Form tampering

Cross-origin requests

HTML proxy with cross-origin request

Exercise – Client side include

.NET architecture

Code Access Security

Cryptosystems

Symmetric-key cryptography

Other cryptographic algorithms

Asymmetric (public-key) cryptography

Man-in-the-Middle (MitM) attack

Digital certificates against MitM attack

Certificate Authorities in Public Key Infrastructure

X.509 digital certificate

Input validation

Integer problems

Path traversal vulnerability

Unvalidated redirects and forwards

Log forging

Improper use of security features

Password management

Improper error and exception handling

Time and state problems

Code quality problems

Matt Bishop’s principles of robust programming

The security principles of Saltzer and Schroeder

Secure coding sources – a starter kit

Vulnerability databases

.NET secure coding guidelines at MSDN

.NET secure coding cheat sheets

Recommended books – .NET and ASP.NET