Learn it from developers who built it.
Tutorials, how-tos and deep dives on AI, .NET, C#, cloud and developer tools, written by the community.
Learn how to secure API payload using AES and RSA encryption in Angular and .NET Core. This step-by-step guide covers hybrid encryption, key exchange, and best practices for protecting sensitive data in web applications.
This article covers secure authentication, authorization, microservices communication, and policy enforcement to help you design modern, resilient, and secure applications based on Zero-Trust principles.
?Injection attacks, such as SQL Injection and Cross-Site Scripting (XSS), exploit vulnerabilities where untrusted data is improperly handled, leading to unauthorized command execution or data access. Mitigation strategies include input validation, parameterized queries, and adhering to secure coding practices to enhance web application security.
In today’s digital landscape, protecting sensitive information is a top priority for organizations. Two widely used techniques for securing data are Encryption and Data Masking. This article explores the key differences between encryption and data masking, their use cases, and their advantages.
TLS (Transport Layer Security) is a cryptographic protocol securing data transmission over networks, ensuring encryption, authentication, and integrity. HTTPS integrates TLS with HTTP, providing secure web communications. In .NET applications, enforcing HTTPS and supporting TLS 1.2+ enhances security.
A Content Security Policy (CSP) enhances website security by preventing malicious attacks like cross-site scripting (XSS) and data injection. By defining allowed content sources, CSP helps protect users from unauthorized scripts and clickjacking.
Learn how to encrypt web.config sections in ASP.NET, export and import RSA encryption keys across multiple servers, and ensure secure decryption. Follow best practices for secure key transfer, compliance, and automation in deployments.
Learn how to encrypt and decrypt **Web.config** sections using **aspnet_regiis.exe** for enhanced security in ASP.NET applications. This guide covers encryption commands, best practices, and considerations for secure configuration management.
When cloning a Git repository over HTTPS, you may encounter the error "self-signed certificate in a certificate chain." This occurs due to an untrusted SSL certificate.
The article explains the steps on how to configure PAT and use PAT to clone the repository. Clone a GitHub repository securely using a Personal Access Token (PAT). Learn to generate a PAT in GitHub settings, then use it to modify the repository URL for a safe clone.
ADO.NET offers low-level access to databases using SQL commands, while EF is an Object-Relational Mapping (ORM) tool that simplifies database operations by mapping objects to database tables, offering higher-level abstractions.
Explore OWASP A01:2021 Broken Access Control vulnerabilities in web applications. Learn effective remedies, security best practices, and coding techniques to mitigate risks.
Veeam Backup & Replication is a program that helps you save and recover data from computers, servers, and the cloud. It lets you set up automatic backups, store the data safely, and restore it if something goes wrong. It is easy to install and set up, making sure your important data is always protected.
Learn why strong, non-meaningful passwords with greater length and character variety help resist guessing and brute-force attacks.
In this article, We will learn the integration of Google reCAPTCHA using JavaScript approach, which is simple and can be helpful to provide security to web application from bot, malicious software or crawl attacks on website.
How to generate public/private key in C#. Asymmetric cryptography also known as public-key encryption uses a public/private key pair to encrypt and decrypt data. In .NET, the RSACryptoServiceProvider and DSACryptoServiceProvider classes are used for asymmetric encryption.
Single Sign-On (SSO) with Gmail allows users to access third-party sites using their Google credentials. Implemented via OAuth 2.0 and OpenID Connect, it simplifies the login process, enhances security, and improves user experience.
In this article, we will learn OAuth 2.0's Authorization Code Grant Type, a core component for securing web applications. Learn how this protocol facilitates secure token exchange between clients and servers, ensuring safe API access.
This visual tool generates the hashed password using either SHA1 or MD5 hashing algorithm depending on the choice you make. It will display the hashed password in the read only text box, it can also copy the hashed password to clipboard on your choice for easy paste operation.
Learn how SSL works in a step-by-step guide for beginners and professionals, ensuring secure internet communication and data protection.
This article is discussing Application Security issue.
This is a discussion about Application Security. This series delves into application security, covering tools like Fortify, Sonatype, and WebInspect. It emphasizes proactive security measures and discusses static code analysis, open-source security, and dynamic scanning.
Protection against clickjacking involves implementing measures like frame-busting scripts, X-Frame-Options HTTP header, and Content Security Policy to prevent malicious actors from hijacking clicks on web pages, enhancing UI security and thwarting attempts to overlay transparent or hidden elements.
Learn effective techniques to protect against frame busting vulnerabilities on websites. Discover how to implement robust security measures, such as Content Security Policy (CSP), to prevent clickjacking and unauthorized framing of web content.
Securing .NET websites is paramount in today's digital landscape. Regular updates, strong authentication, HTTPS enforcement, input sanitization, CSP implementation, CSRF protection, defense-in-depth, and security audits are crucial steps.
Once you've removed a website's access to your Email account, they will no longer be able to access your email.
This article elucidates various token types in OpenID Connect, including JSON Web Tokens (JWT), Access Tokens, ID Tokens, and Refresh Tokens. It discusses their significance, structure, and usage in authentication and authorization processes.
In this article, you will learn about the workflow Of OAuth 2.0 Authorization Grant Types and define the workflow for obtaining access tokens, crucial for securing API access.
From this article, you will learn a comprehensive approach to protecting your cached data. In the realm of distributed caching, safeguarding cache nodes is crucial for protecting data and infrastructure. NCache, a robust distributed caching solution, offers comprehensive security features. This article guides you through configuring security levels in NCache for optimal data safety.
Everything on Security, not only its articles: the Security page →
Write an article and earn +1,000 SHARP when it is approved.
Write an article