Most .NET developers do not incorporate security best practices when creating websites. The problem? Even if you use all of the best practices that the [...] team recommends, you are still falling short in several key areas due to issues within the framework itself. And most developers don¿t use all of the best practices that are recommended.

If you are interested in truly top-notch security, available sources don¿t give you the information you need. Most blogs and other books simply state how to use the configurations within [...], but do not teach you security as understood by security professionals. Online code samples aren't much help because they are usually written by developers who aren¿t incorporating security practices.

This book solves those issues by teaching you security first, going over software best practices as understood by security professionals, not developers. Then it teaches you how security is implemented in [...]. With that foundation, it dives into specific security-related functionality and discusses how to improve upon the default functionality with working code samples. And you will learn how security professionals build software security programs so you can continue building software security best practices into your own Secure Software Development Life Cycle (SSDLC).

What Yoüll Learn

Know how both attackers and professional defenders approach web security

Establish a baseline of security for understanding how to design more secure software

Discern which attacks are easy to prevent, and which are more challenging, in [...]

Dig into [...] source code to understand how the security services work

Know how the new logging system in [...] falls short of security needs

Incorporate security into your software development process

Who This Book Is For

Software developers who have experience creating websites in [...] and want to know how to make their websites secure from hackers and security professionals who work with a development team that uses [...]. To get the most out of this book, you should already have a basic understanding of web programming and [...], including creating new projects, creating pages, and using JavaScript.

Topics That Are New to This Edition

This edition has been updated with the following changes:

Best practices and code samples updated to reflect security-related changes in [...] 8

Improved examples, including a fully-functional website incorporating security suggestions

Best practices for securely using Large Language Models (LLMs) and AI

Expansions and clarifications throughout