security
ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
520 articles Updated Page 2 of 21
Browse additional ASP.NET Core and .NET Security articles from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 2 of 21
Newest first
-
Bot protection that outlives your provider
Medium Issue #535
Adding captcha to a .NET API — and what happens when one provider stops being enough.
-
AI Integration in .NET
Medium Issue #534
How to use provider-neutral abstractions, structured outputs, tool calling, resilience, observability, evaluation, and secure application…
-
Passkeys in ASP.NET Core 10
C# Digest Issue #534
how registration and sign-in actually work under the hood
-
Limit what NuGet packages can do in your project
Meziantou's blog Issue #534
When you add a NuGet package to a project, you often think about the runtime library only. In reality, packages can also import MSBuild props/targets and Roslyn analyzers. Those assets run during rest...
-
How to Validate Configuration in ASP.NET Core
Dev Tips Issue #533
Bad configuration should crash your app at startup, not deep in a request. Learn how to validate configuration in ASP.NET Core with Data Annotations and FluentValidation, and fail fast with ValidateOn
-
Grand Larceny Auto: Manually Unpacking a ConfuserEx-Protected .NET/Godot CTF Challenge
Medium Issue #533
A hands-on walkthrough of defeating rename obfuscation, control-flow flattening, caller-bound string encryption, and a logic bug in a…
-
.NET 10 RDP Honeypot: Logging Source IPs, Usernames, and Login Attempts
Medium Issue #532
I wrote this article before:
-
How to Scan and Sanitize File Uploads Before Storage in ASP.NET Core
Medium Issue #532
Virus scanning a file upload can tell us whether it contains a known threat, but it doesn’t change anything about the dangerous content…
-
C# 15 Unsafe Model: Auditing Existing Native Interop Code for .NET 11
C# Corner Issue #532
Learn how to audit existing C# native interop and unsafe code for C# 15 and .NET 11, focusing on compatibility, safety, migration risks, and best practices.
-
Stop ignoring API failures. Use Polly
Round The Code Issue #530
API calls fail. Learn how to add Polly to an ASP.NET Core Web API to handle retries, circuit breakers and timeouts.
-
How to implement HMAC authentication in ASP.NET Core - InfoWorld
infoworld.com Issue #530
How to implement HMAC authentication in ASP.NET Core InfoWorld
-
Fixing .NET SslException on Linux Container
Network Programming in .NET Issue #529
.NET 8 / C# LINUX / OPENSSL GOOGLE CLOUD RUNFixing .NET SslException on Linux ContainerDeployments: The ‘RequireEncryption’ Policy PitfallAuthor: DevOps & Software Architecture Engineering Category: T...
-
NuGet Package Source Mapping: Preventing Dependency Confusion in .NET
C# Corner Issue #529
Learn how NuGet Package Source Mapping prevents dependency confusion attacks in .NET applications by controlling package sources and securing software supply chains.
-
Use Aspire to implement and deploy the BFF security architecture
Software Engineering Issue #527
This blog demonstrates how to use Aspire to set up a solution for developing and deploying an ASP.NET Core web application with Auth0 as the identity provider and a downstream API. The application use...
-
The Lazy Engineer’s Blueprint, Part 7: Security
Medium Issue #526
Part 7: authenticate a person or a machine, project the caller into a module without the host, and authorize with policies off the handler.
-
Security Headers and CSP for Blazor: One Middleware, Every Host
Medium Issue #526
Every client-facing host must stamp the same hardened response headers, but a Blazor host needs a Content-Security-Policy no static string…
-
Building a Reliable and Scalable AI-Powered ATS with .NET and Angular
C# Corner Issue #525
Explore how to build a reliable and scalable AI-powered ATS with .NET and Angular, covering AI integration, security, observability, asynchronous processing, and human oversight.
-
Stopping copy-paste of Frontegg auth across 15 .NET services
Medium Issue #525
We had a simple goal: around a dozen .NET applications on our platform needed to integrate with Frontegg, and nobody wanted to implement…
-
Building Reproducible .NET Builds with Locked Dependency Graphs
C# Corner Issue #525
Build reproducible .NET applications with locked dependency graphs to control transitive packages, prevent unexpected dependency changes, and improve build integrity across environments.
-
CodeAct + Hyperlight: Sandboxed Code Execution in the Microsoft Agent Framework
Medium Issue #525
What happens when you stop handing your agent ten tools and start letting it write the code itself — and where that code actually runs.
-
Field-Level Encryption in EF Core: AES-GCM for PII Columns
Medium Issue #524
Transparent database encryption protects the file, then decrypts for anyone who can query it. When a column holds data sensitive enough…
-
Managing Secrets in Microsoft Agent Framework
YapCast – Jesse Liberty Issue #524
In the realm of software development, managing configuration values and sensitive information is a critical aspect that can significantly impact the security and functionality of applications. Develop...
-
Building Scalable Enterprise Architectures with the Backend for Frontend (BFF) Pattern in C#
C# Corner Issue #524
Unlock scalable enterprise architectures with the Backend for Frontend (BFF) pattern in C#. Optimize performance, security, and client experience.
-
CSP Nonces vs Hashes: Lessons I Learned Securing an ASP.NET Core Application
C# Corner Issue #524
Master CSP nonces vs hashes for ASP.NET Core security. Learn when to use each to prevent XSS and secure your application effectively.
-
C# 15 Memory Safety: Auditing Unsafe Code Contracts
C# Corner Issue #523
C# 15 enhances memory safety by making unsafe code boundaries explicit, shifting focus from pointer syntax to actual memory access for better auditing.