BEGINNING ASP.NET SECURITY

Book excerpt: Market_Desc: Beginning ASP.NET 3.5 Security is for beginning to intermediate ASP.NET developers who are new to ASP.NET but understand basics such as web forms, and code behind. Readers should understand how to build a basic ASP.NET web site but may have no previous knowledge of security. Readers should have an understanding of C#/VB.NET as well as HTML/XHTML and JavaScript. Special Features: " Popular Technology - ASP.NET is Microsoft's web application framework and is used by millions of developers worldwide. ASP.NET is used by C# and VB.NET developers and can be used for SharePoint applications" Leading Brand - Wrox is the leading publisher in the .NET space and in ASP.NET in particular" Expert Author - Barry Dorrans is an MVP in the security category and frequently writes and speaks on the subject" Must know information - According to The Open Web Application Security Project (OWASP) there are more than 300 issues that must be addressed to ensure a web application is secured properly" Risks at an all time high - Security attacks on internal and external web applications are at an all time high and can lead to loss of revenues and identity theft. More than 126 million records worldwide were stolen in 2007 (AP)." Requested Coverage - Feedback from Wrox's reader forums as well as the Author's speaking engagements indicate that readers are looking for coverage of ASP.NET security at the introductory level About The Book: Beginning ASP.NET 3.5 Security is geared for novice to intermediate ASP.NET programmers who wish to protect and defend their web sites against attack and exploitation. Beginning with a discussion of why we need security and the things that may occur when it is ignored and an overview of how ASP.NET works, readers are taken through the common steps in developing a web site, the security problems each area exposes and how these can be exploited. Visual Studio Security MVP Barry Dorrans teaches readers how they can defend their applications using the standard .NET framework, industry patterns and best practices, code libraries and resources provided by Microsoft and others.Beginning ASP.NET 3.5 Security provides a step by step solution to securing each area of ASP.NET development by providing a practical approach and providing references to examples of web sites that have suffered the exploits and additional material which will inspire readers to investigate and learn more. Readers can check their learning through exercise questions.