ASP.NET Core: Preventing attacks 2.0

That's version 2.0 of the talk about the built-in ASP.NET security features, updated and expanded after the .NET Core 2.0 was released. We'll look into the new Microsoft Web framework from the security point of view.

This talk covers the differences in security features of various versions of ASP.NET. We'll see how the built-in security features from XSS and CSRF work now, what cryptography abilities are available off the shelf, how the session management works. This talk will be interesting for developers who work on secure ASP.NET applications, for specialists who do a security review of .NET projects, as well as for everyone who wants to understand the realization of the security components using this platform as an example.