LEADER 04341nam 22005655 450 001 9910896177903321 005 20250807124731.0 010 $a979-88-6880-494-6 024 7 $a10.1007/979-8-8688-0494-6 035 $a(CKB)36251287700041 035 $a(MiAaPQ)EBC31696283 035 $a(Au-PeEL)EBL31696283 035 $a(DE-He213)979-8-8688-0494-6 035 $a(CaSebORM)9798868804946 035 $a(OCoLC)1459142222 035 $a(OCoLC-P)1459142222 035 $a(EXLCZ)9936251287700041 100 $a20241002d2024 u| 0 101 0 $aeng 135 $aur||||||||||| 181 $ctxt$2rdacontent 182 $cc$2rdamedia 183 $acr$2rdacarrier 200 10$aAdvanced ASP.NET Core 8 Security $eMove Beyond ASP.NET Documentation and Learn Real Security /$fby Scott Norberg 205 $a2nd ed. 2024. 210 1$aBerkeley, CA :$cApress :$cImprint: Apress,$d2024. 215 $a1 online resource (470 pages) 300 $aIncludes index. 311 08$a979-88-6880-493-9 327 $aChapter 1: Intro to Security -- Chapter 2: Software Security Overview -- Chapter 3: Web Security -- Chapter 4: Thinking Like a Hacker -- Chapter 5: Introduction to ASP.NET Core Security -- Chapter 6: Cryptography -- Chapter 7: Processing User Input -- Chapter 8: Data Access and Storage -- Chapter 9: Authentication and Authorization -- Chapter 10: Advanced Web Security -- Chapter 11: Logging and Error Handling. Chapter 12: Setup and Configuration. - Chapter 13: Secure Software Development Life Cycle. (SSDLC). 330 $aMost .NET developers do not incorporate security best practices when creating websites. The problem? Even if you use all of the best practices that the ASP.NET team recommends, you are still falling short in several key areas due to issues within the framework itself. And most developers don?t use all of the best practices that are recommended. If you are interested in truly top-notch security, available sources don?t give you the information you need. Most blogs and other books simply state how to use the configurations within ASP.NET, but do not teach you security as understood by security professionals. Online code samples aren't much help because they are usually written by developers who aren?t incorporating security practices. This book solves those issues by teaching you security first, going over software best practices as understood by security professionals, not developers. Then it teaches you how security is implemented in ASP.NET. With that foundation, it dives into specific security-related functionality and discusses how to improve upon the default functionality with working code samples. And you will learn how security professionals build software security programs so you can continue building software security best practices into your own Secure Software Development Life Cycle (SSDLC). What You?ll Learn Know how both attackers and professional defenders approach web security Establish a baseline of security for understanding how to design more secure software Discern which attacks are easy to prevent, and which are more challenging, in ASP.NET Dig into ASP.NET source code to understand how the security services work Know how the new logging system in ASP.NET falls short of security needs Incorporate security into your software development process New to This Edition This edition has been updated with the following changes: Best practices and code samples updated to reflect security-related changes in ASP.NET 8 Improved examples, including a fully-functional website incorporating security suggestions Best practices for securely using Large Language Models (LLMs) and AI Expansions and clarifications throughout . 606 $aMicrosoft software 606 $aMicrosoft .NET Framework 606 $aData protection 606 $aMicrosoft 606 $aData and Information Security 615 0$aMicrosoft software. 615 0$aMicrosoft .NET Framework. 615 0$aData protection. 615 14$aMicrosoft. 615 24$aData and Information Security. 676 $a005.268 700 $aNorberg$b Scott$01058755 801 0$bMiAaPQ 801 1$bMiAaPQ 801 2$bMiAaPQ 906 $aBOOK 912 $a9910896177903321 996 $aAdvanced ASP.NET Core 8 Security$94375012 997 $aUNINA