WhatWorks in AppSec: ASP.NET Identity and AntiForgery Tokens
- Friday, July 24th, 2015 at 11:00 AM EDT (15:00:00 UTC)
- Eric Johnson
You can now attend the webcast using your mobile device!
Learn how to block authentication, authorization, and CSRF attacks in your ASP.NET MVC applications! In this webcast, Eric Johnson, the lead author of the DEV544: Secure Coding in .NET course will break down and demonstrate how to use ASP.NET Identity to stop brute-force attacks and implement access control rules in your applications. This presentation will also show you how to block CSRF attacks by using AntiForgey tokens. This webcast serves as a primer for developers or architects considering making the leap to .NET MVC and will leave you with immediate takeaways to go secure your applications.
Take DEV544 and learn more about .NET security from Eric Johnson at Network Security in Las Vegas September 14th 17th.
Cant travel? DEV544 will also be running in the online vLive format from October 27th November 19th.
In addition to being the Application Security Curriculum product manager at SANS, Eric is the lead author and instructor for DEV544 Secure Coding in .NET, as well as an instructor for DEV541 Secure Coding in Java/JEE. A senior security consultant at Cypress Data Defense, Eric's experience includes web and mobile application penetration testing, secure code review, risk assessment, static source code analysis, security research, and developing security tools. He currently holds the CISSP, GWAPT, GSSP-.NET, and GSSP-Java certifications.