Common Security Practices
As a developer, security seems to be a black box sometimes. You always hear about incidents where websites have been hacked, but you might think to yourself, “That couldn’t happen to me,” until it happens to you. When you witness a website you built being attacked first-hand, it’s a humbling experience.
While the techniques we’re about to cover only scratch the surface for ASP.NET websites, they encourage developers to become more proactive in their coding as opposed to finding out they were hacked and immediately becoming reactive.
In this section, we’ll review common security practices in the industry you can use to protect yourself so that you know what your system is doing and are not exposing too much to the world. We’ll learn about the different types of logs, how to update libraries and frameworks, and how to remove header information. We’ll finish this chapter by learning how to encrypt...