Beginning ASP.NET Security

Secure Applications with Confidence

Beginning Security focuses on the security problems web developers actually run into: untrusted input, cookies, credentials, database access, file-system exposure, and the tricky corners of itself. Barry Dorrans writes from a practical developer’s point of view, building the subject step by step so the security model feels connected to real application work rather than abstract theory.

The book begins with the foundations of web security and the way HTTP, forms, and the pipeline behave, then moves into the habits that make applications harder to attack. From there, it explores authentication, hashing and encryption, safe data handling, and the security implications of common platform features. Later chapters extend that thinking into IIS, WCF, third-party authentication, and MVC.

What the Book Covers

• Core ideas behind web application security
• Safely handling user input and form data
• Protecting secrets with hashing and encryption
• Authentication and authorization basics
• Secure use of databases and the file system
• Security concerns in IIS, WCF, and MVC

Built for Developers Who Want Practical Security Thinking

This is a hands-on security title for developers who want a guided path through the vulnerabilities and defensive patterns that matter most. The chapter structure moves from fundamentals to more advanced topics, making the book especially helpful for readers who prefer a steady, application-focused approach to security.

A Useful Reference as You Build

Because it covers both concepts and implementation concerns, Beginning Security works well as a learning resource and as a reference when you need to revisit a security-sensitive part of an application. It is a focused, developer-oriented guide for anyone working with the stack who wants to write with more care and fewer surprises.