Web applications today are being hacked with alarming regularity by hacktivists, online criminals, and nation states.

Very frequently, it is the same prevalent security risks being exploited which is why the Open Web Application Security Project (OWASP) developed their list of Top 10 Most Critical Web Application Security Risks to help developers build more secure software.

This course helps developers apply the Top 10 in ASP.NET using both web forms and MVC by walking through an overview of the risk, demonstrating how it can be exploited in .NET and then delving into the various approaches available to mitigate it by applying security in depth.
Author Name: Troy Hunt
Author Description:
Troy Hunt is a Microsoft Regional Director and MVP for Developer Security, an ASPInsider, and a full time Author for Pluralsight—a leader in online training for technology and creative professionals. Troy has been building software for browsers since the very early days of the web and possesses an exceptional ability to distill complex subjects into relatable explanations. This has led Troy to become an industry thought leader in the security space and produce more than twenty top-rated courses … more

Table of Contents

• Introduction
  17mins
• Injection
  49mins
• Cross Site Scripting (XSS)
  59mins
• Broken Authentication and Session Management
  28mins
• Insecure Direct Object References
  35mins
• Cross Site Request Forgery (CSRF)
  38mins
• Security Misconfiguration
  47mins
• Insecure Cryptographic Storage
  65mins
• Failure to Restrict URL Access
  42mins
• Insufficient Transport Layer Protection
  72mins
• Unvalidated Redirects and Forwards
  30mins