Understanding ASP.NET Core Security
Pluralsight
Course Summary
Security in ASP.NET Core shouldn't come as an afterthought when designing your application. In this course, you'll learn how to mitigate common attacks and implement encryption, authentication, and authorization.
-
+
Course Description
Learn how to make your ASP.NET Core app secure in this course. First you'll learn about common attacks and how to mitigate them with NWebSec. You'll learn the ins and outs of the new encryption API and how to protect secrets with the secret manager. Authentication is covered by explaining ASP.NET Core Identity as well as implementing a token service with IdentityServer. Finally you'll see that ASP.NET Core's authorization system is now policy based.
-
+
Course Syllabus
Course Overview- 1m 26s
—Course Overview 1m 26sProtecting Your Application Against Common Attacks- 32m 41s
—Introduction 2m 28s
—Applying SSL 3m 52s
—Http Strict Transport Security (HSTS) 4m 21s
—SQL Injection 2m 42s
—Cross Site Request Forgery (CSRF) 3m 50s
—Cross Site Scripting (XSS) 3m 2s
—Content Security Policy (CSP) 2m 11s
—Open Redirection Attack 2m 29s
—Click-jacking 1m 34s
—Same Origin Policy and CORS 5m 36s
—Summary 0m 30sUnderstanding the Data Protection API and the Secret Manager- 19m 53sImplementing Authentication with ASP.NET Core Identity- 44m 55sCentralized Authentication with a Token Service- 1h 5mApplying Authorization- 21m 25s