Attack Mitigation Mechanisms in ASP.NET Core

on YouTube ↗50m

" summary

Overview of ASP.NET Core security: compares the redesigned, open-source framework to classic ASP.NET and explains new and rewritten security features. Covers built-in protections for XSS and CSRF, available cryptography APIs, and how session management is implemented, aimed at developers and security reviewers of .NET applications.

AI-written summary · about

" chapters (9)

1. 0:00Introduction
2. 2:37Open Redirect attacks
3. 6:15XSS prevention
4. 14:53Content Security Policy
5. 20:59Data Protection
6. 28:49CSRF prevention
7. 36:26Cookie best practices
8. 43:36Session vulnerabilities
9. 47:13Summary

" related talks

• 39mA guided tour of ASP.NET core securityAnders Abel · Øredev 2016
• 54mASP.NET Core Meets Owasp Top 10Anders Abel · NDC Security 2022
• 58mASP.NET Core meets OWASP Top 10 2025Anders Abel · NDC Security 2026
• 52mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier · NDC Copenhagen 2019
• 01h 03mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Brock Allen · NDC Minnesota 2019
• 32mBuilding Secure ASP.NET Core MVC ApplicationsNiels Tanis · AppSec USA 2017
• 40mSecurity in ASP.NET Core 2.1Barry Dorrans · Øredev 2018
• 01h 01mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier · NDC Security Oslo 2019