OWASP Top 10, C# Secure Coding Follow Up Training in United States of America

  • Learn via: Classroom
  • Duration: 1 Day
  • Price: Please contact for booking options
We can host this training at your preferred location. Contact us!

This course is the next step for our participants, who completed our OWASP Top 10, C# Secure Coding Fundamentals course. This is a follow up training, meaning that in order to attend this, everyone must already have the knowledge that is covered in the Fundamentals.

This course enables our participants to gain a deeper knowledge in the field, because here we emphasize the C#-specific aspects of secure coding instead of the general vulnerabilities.

At the end of the training everyone has the possibility to take an exam, where they are able to measure their level of the gained knowledge.

  • Learn client-side vulnerabilities and secure coding practices
  • Learn to use various security features of the .NET development environment
  • Have a practical understanding of cryptography

  • Client-side security
  • .NET security architecture and services
  • Practical cryptography



Client-side security

  • JavaScript security
  • Same Origin Policy
  • Simple requests
  • Preflight requests
  • Clickjacking
    • Clickjacking
    • Exercise – IFrame, Where is My Car?
    • Protection against Clickjacking
    • Anti frame-busting – dismissing protection scripts
    • Protection against busting frame busting
  • AJAX security
    • XSS in AJAX
    • Script injection attack in AJAX
    • Exercise – XSS in AJAX
    • XSS protection in AJAX
    • Exercise CSRF in AJAX – JavaScript hijacking
    • CSRF protection in AJAX

.NET security architecture and services

  • .NET architecture
  • Code Access Security (optional)
    • Full and partial trust
    • Evidence classes
    • Permissions
    • Code access permission classes
    • Deriving permissions from evidence
    • Defining custom permissions
    • .NET runtime permission checking
    • The Stack Walk
    • Effects of Assert()
    • Class and method-level declarative permission
    • Imperative (programmatic) permission checking
    • Exercise – sandboxing .NET code
    • Using transparency attributes
    • Allow partially trusted callers
    • Exercise – using transparency attributes

Practical cryptography

  • Rule #1 of implementing cryptography
  • Cryptosystems
    • Elements of a cryptosystem
    • .NET cryptographic architecture
  • Symmetric-key cryptography
    • Providing confidentiality with symmetric cryptography
    • Symmetric encryption algorithms
    • Modes of operation
    • Encrypting and decrypting (symmetric)
  • Other cryptographic algorithms
    • Hash or message digest
    • Hash algorithms
    • SHAttered
    • Hashing
    • Message Authentication Code (MAC)
    • Providing integrity and authenticity with a symmetric key
    • Random number generation
      • Random numbers and cryptography
      • Cryptographically-strong PRNGs
      • Weak PRNGs in .NET
      • Strong PRNGS in .NET
      • Hardware-based TRNGs
  • Asymmetric (public-key) cryptography
    • Providing confidentiality with public-key encryption
    • Rule of thumb – possession of private key
    • The RSA algorithm
      • Introduction to RSA algorithm
      • Encrypting with RSA
      • Combining symmetric and asymmetric algorithms
      • Digital signing with RSA
      • Asymmetric algorithms in .NET
      • Exercise Sign
      • Exercise – using .NET cryptographic classes
  • Public Key Infrastructure (PKI)
    • Man-in-the-Middle (MitM) attack
    • Digital certificates against MitM attack
    • Certificate Authorities in Public Key Infrastructure
    • X.509 digital certificate


Contact us for more detail about our trainings and for all other enquiries!

Upcoming Trainings

Join our public courses in our United States of America facilities. Private class trainings will be organized at the location of your preference, according to your schedule.

Classroom / Virtual Classroom
23 November 2024
United States of America
1 Day
Classroom / Virtual Classroom
27 November 2024
United States of America
1 Day
Classroom / Virtual Classroom
23 November 2024
United States of America
1 Day
Classroom / Virtual Classroom
07 January 2025
United States of America
1 Day
Classroom / Virtual Classroom
27 November 2024
United States of America
1 Day
Classroom / Virtual Classroom
22 January 2025
United States of America
1 Day
Classroom / Virtual Classroom
07 January 2025
United States of America
1 Day
Classroom / Virtual Classroom
22 January 2025
United States of America
1 Day
OWASP Top 10, C# Secure Coding Follow Up Training Course in the United States

The United States of America (USA) is a country in North America and a federal republic of 50 states. At almost 9.8 million square kilometers, the United States is one of the world’s biggest and most populous countries. While America’s capital city is Washington, D.C., some of its well known cities are New York, Los Angeles, Miami, Chicago, Orlando, Las Vegas, Dallas, San Francisco and Kansas City.

The most iconic symbol of the country is probably the Statue of Liberty in New York and it was gifted by France. Despite the fact that English is the most widely used language in the United States, there is no official language. Independent since July 4, 1776, USA’s motto is “In God We Trust” and their current president is Joe Biden. Some of the best places to visit in the United States are Grand Canyon, Yosemite, Maui, New Orleans, Honolulu, Zion National Park, Kauai, Lake Tahoe, Aspen, Big Sur and Santa Fe.

Achieve your IT goals through our versatile courses, spanning programming, data analytics, software development, business skills, cloud computing, cybersecurity, project management. Benefit from the flexibility of hosting training at your preferred location within United States, where our experienced instructors will provide hands-on learning and practical expertise.
By using this website you agree to let us use cookies. For further information about our use of cookies, check out our Cookie Policy.