ASP.NET

W05 Hack Proofing Your Modern Web Applications

05/18/2016

9:30am - 10:45am

Level: Introductory

Adam Tuliper

Principal Software Engineer, DX

Microsoft

Secure your modern Web apps now. Developers are notoriously lax with including security in their applications. In an age of hacking, this talk aims to arm the developer with an arsenal of protections to use while developing. This presentation explores the most common attacks on Web applications, how they work to exploit your app, and most importantly, how to protect against them.

This session will cover techniques such as Cross Site Scripting, SQL Injection, Session Hijacking, and Cross Site Request Forgery. Angular, Web Forms, MVC, you name it-all are vulnerable and all will be covered, as well as pure JavaScript/html applications. You'll start with "broken" applications and secure them throughout the presentation. You'll leave this presentation empowered to immediately start protecting your modern Web applications.

You will learn:

  • Why most existing applications can be hacked in some way
  • Details of common hack attacks in Modern Web Applications
  • Techniques for protecting your web applications against the most common attacks