Introduction to .NET Application Security
o Microsoft .NET Application Security
o Common Security Threats on .NET
o Secure Development Lifecycle (SDL)
o Secure Coding Principles
o Guidelines for Developing Secure Codes
NET Framework Security
o Introduction to .NET Framework
o .Net Runtime Security
o .NET Class Libraries Security
o .NET Assembly Security
o .NET Security Tools
o Best Practices for .NET Framework Security
Input Validation and Output Encoding
o Input Validation
o Input Validation Attacks
o Defensive Techniques against SQL Injection Attacks
o Output Encoding
o Sandboxing
o Best Practices
.NET Authorization and Authentication
o Introduction to Authentication and Authorization
o Authentication
o Authorization
o Authentication and Authorization Vulnerabilities
o Authentication and Authorization Best Practices
o Secure Communication
Secure Session and State Management
o Session Management
o Session Management Techniques in ASP.NET
o Session Attacks and Its Defensive Techniques
o Securing Cookie Based Session Management
o ViewState Security
o Guidelines for Secure Session Management
.NET Cryptography
o Introduction to Cryptography
o Symmetric Encryption
o Asymmetric Encryption
o Hashing
o Digital Signatures
o Digital Certificates
o XML Signatures
.NET Error Handling, Auditing, and Logging
o Error Handling
o Exception Handling in ASP.NET
o Exception Handling Best Practices
o Auditing and Logging
o Auditing and Logging Best Practices
o .NET Logging Tools
.NET Secure File Handling
o File Handling
o Attacks on File and Its Defensive Techniques
o Securing Files
o File Extension Handling
o Isolated Storage
o File Access Control Lists (ACLs)
o Checklist for Securely Accessing Files
.NET Configuration Management and Secure Code Review
o Configuration Management
o Machine Configuration File
o Application Configuration Files
o Code Access Security Configuration Files
o Configuration Management Best Practices
o Secure Code Review
o Static Code Analysis Tools
