Last Day to get an iPad mini, Surface Go 2, or Take $300 Off with OnDemand Training


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

WhatWorks in AppSec: ASP.NET Identity and AntiForgery Tokens

  • Friday, July 24, 2015 at 11:00 AM EDT (2015-07-24 15:00:00 UTC)
  • Eric Johnson

You can now attend the webcast using your mobile device!



Learn how to block authentication, authorization, and CSRF attacks in your ASP.NET MVC applications! In this webcast, Eric Johnson, the lead author of the DEV544: Secure Coding in .NET course will break down and demonstrate how to use ASP.NET Identity to stop brute-force attacks and implement access control rules in your applications. This presentation will also show you how to block CSRF attacks by using AntiForgey tokens. This webcast serves as a primer for developers or architects considering making the leap to .NET MVC and will leave you with immediate takeaways to go secure your applications.

Take DEV544 and learn more about .NET security from Eric Johnson at Network Security in Las Vegas September 14th 17th.

Cant travel? DEV544 will also be running in the online vLive format from October 27th November 19th.

Speaker Bio

Eric Johnson

Eric is a Co-founder and Principal Security Engineer at Puma Security and a Senior Instructor with the SANS Institute. His experience includes cloud security assessments, cloud infrastructure automation, static source code analysis, web and mobile application penetration testing, secure development lifecycle consulting, and secure code review assessments. Eric is the lead author and an instructor for SEC540: Cloud Security and DevOps Automation, a co-author and instructor for both the brand new SEC510: Multicloud Security Assessment and Defense, and the upcoming SEC584: Defending Cloud Native Infrastructure. Additionally, Eric is a SANS Security Awareness Developer Training Advisory Board Member and SANS Analyst for Application Security and DevSecOps Surveys.

To learn more about Eric, read his full bio here:

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.