WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2024 • Aug 20, 2024 • Session details

Programming secure C#/.NET Applications: Dos & Don'ts

Sebastian Leuer

Did you know AI frequently injects deprecated crypto classes into C# code? Master secure .NET architecture and strict parameter validation to prevent critical system compromise.

Pause
Mute Enter Fullscreen
#1 about 3 min

Introduction to speaker and software security concepts

How static code analysis tooling and security training help developers eliminate false positives and build more secure .NET applications.

#2 about 5 min

Security risks of AI based code generation

Why relying on AI to generate cryptographic logic leads to deprecated APIs and insecure practices like missing special characters.

#3 about 11 min

Preventing visual spoofing and Unicode handling vulnerabilities

How visual spoofing and improper Unicode normalization can bypass validation logic and misroute sensitive platform data.

#4 about 4 min

Demonstrating and preventing SQL injection in .NET

Modifying inline SQL statements to use parameterized queries prevents malicious database manipulation by untrusted user input.

#5 about 4 min

Preventing command injection during system process execution

Safely passing user input to system processes using the ArgumentList property in .NET Core prevents arbitrary code execution.

#6 about 6 min

Securing file upload features against path traversal

Enforcing bounding sandbox directories and validating absolute paths stops attackers from using relative references to rewrite system files.

#7 about 4 min

Securing JSON and XML parsing against exploits

Disabling automatic type handling and DTD processing in parsers mitigates arbitrary code execution and system crashes from malformed inputs.

Matching moments

1:49 min

Adapting application security for AI-generated code

Christian Heilmann Christian Heilmann +1 · World Congress 2026 North America

3:36 min

Security vulnerabilities in rapid AI code generation

Chris Heilmann Chris Heilmann +2 · LIVE

4:02 min

Preventing application outages caused by unvetted AI generated code

Chris Heilmann Chris Heilmann +2 · LIVE

4:15 min

Security vulnerabilities introduced by frictionless AI code generation

Angie Jones Angie Jones +3 · LIVE

2:19 min

Security vulnerabilities hidden in elegant syntax

Chris Heilmann Chris Heilmann +2 · LIVE

2:59 min

Building a vulnerable application for security testing

Malte Lantin Malte Lantin +1 · World Congress 2026 Europe

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail
24:07
about 1 year ago

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail
21:17
almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail
31:50
about 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail
29:43
about 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Livecoding with AI thumbnail
31:39
about 2 years ago

Livecoding with AI

Rainer Stropek

Dapr in Practice thumbnail
24:08
about 2 years ago

Dapr in Practice

marcklefter

Upcoming sessions on this topic

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Teaching AI Coding Agents to Build It Right the First Time

  • Sajeetharan Sinnathurai

    Microsoft

    Principal Product Manager

Open session

Speed or Security? Why Not Both for Your Coding Agents

  • Ajeet Raina

    Docker

    Developer Advocate

Open session

Prompt Debt: Why Your AI System Is Frozen in Time

  • Suriya Prakash B

    Red Hat

    Principal Software Engineer

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Related videos

Software Security 101: Secure Coding Basics thumbnail
1:58:48
World Congress 2021 • over 5 years ago

Software Security 101: Secure Coding Basics

Thomas Konrad

101 Typical Security Pitfalls thumbnail
28:41
World Congress 2022 • over 4 years ago

101 Typical Security Pitfalls

Alexander Pirker

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools thumbnail
35:37
LIVE • about 2 years ago

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools

Liran Tal

The Things Your AI Isn't Telling You thumbnail
25:06
World Congress 2026 North America • 21 days ago

The Things Your AI Isn't Telling You

Desmond Lamptey

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail
38:44
Coffee With Developers • 8 months ago

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski, Wekoslav Stefanovski

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
World Congress 2024 • about 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.