WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2024 • Aug 20, 2024 • Session details

Programming secure C#/.NET Applications: Dos & Don'ts

Sebastian Leuer

Did you know AI frequently injects deprecated crypto classes into C# code? Master secure .NET architecture and strict parameter validation to prevent critical system compromise.

Pause
Mute Enter Fullscreen
#1 about 3 min

Introduction to speaker and software security concepts

How static code analysis tooling and security training help developers eliminate false positives and build more secure .NET applications.

#2 about 5 min

Security risks of AI based code generation

Why relying on AI to generate cryptographic logic leads to deprecated APIs and insecure practices like missing special characters.

#3 about 11 min

Preventing visual spoofing and Unicode handling vulnerabilities

How visual spoofing and improper Unicode normalization can bypass validation logic and misroute sensitive platform data.

#4 about 4 min

Demonstrating and preventing SQL injection in .NET

Modifying inline SQL statements to use parameterized queries prevents malicious database manipulation by untrusted user input.

#5 about 4 min

Preventing command injection during system process execution

Safely passing user input to system processes using the ArgumentList property in .NET Core prevents arbitrary code execution.

#6 about 6 min

Securing file upload features against path traversal

Enforcing bounding sandbox directories and validating absolute paths stops attackers from using relative references to rewrite system files.

#7 about 4 min

Securing JSON and XML parsing against exploits

Disabling automatic type handling and DTD processing in parsers mitigates arbitrary code execution and system crashes from malformed inputs.

Matching moments

3:36 min

Security vulnerabilities in rapid AI code generation

Chris Heilmann Chris Heilmann +2 · LIVE

4:02 min

Preventing application outages caused by unvetted AI generated code

Chris Heilmann Chris Heilmann +2 · LIVE

4:15 min

Security vulnerabilities introduced by frictionless AI code generation

Angie Jones Angie Jones +3 · LIVE

2:19 min

Security vulnerabilities hidden in elegant syntax

Chris Heilmann Chris Heilmann +2 · LIVE

2:59 min

Building a vulnerable application for security testing

Malte Lantin Malte Lantin +1 · World Congress 2026 Europe

4:08 min

Evaluating artificial intelligence for code generation and vulnerabilities

Jackie · Coffee With Developers

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail
24:07
about 1 year ago

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail
21:17
almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail
31:50
about 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail
29:43
about 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Livecoding with AI thumbnail
31:39
about 2 years ago

Livecoding with AI

Rainer Stropek

Dapr in Practice thumbnail
24:08
about 2 years ago

Dapr in Practice

marcklefter

Related videos

Software Security 101: Secure Coding Basics thumbnail
1:58:48
World Congress 2021 • over 5 years ago

Software Security 101: Secure Coding Basics

Thomas Konrad

101 Typical Security Pitfalls thumbnail
28:41
World Congress 2022 • over 4 years ago

101 Typical Security Pitfalls

Alexander Pirker

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools thumbnail
35:37
LIVE • about 2 years ago

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools

Liran Tal

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail
38:44
Coffee With Developers • 7 months ago

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski, Wekoslav Stefanovski

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
World Congress 2024 • about 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

GenAI Is a Junior Dev With Root Access thumbnail
26:07
World Congress 2026 Europe • 3 months ago

GenAI Is a Junior Dev With Root Access

Julian Totzek-Hallhuber

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.