Protecting Sensitive Data From Exposure in ASP.NET 3 and ASP.NET Core 3 Applications from Pluralsight

Keeping personal, financial, or other sensitive data secure from theft or exposure takes active management. This course will teach you how to identify sensitive data in your applications and the protection measures that can be used to keep it secure.

Unprotected sensitive data is one of the top vulnerabilities facing applications today. In this course, Protecting Sensitive Data From Exposure in ASP.NET and ASP.NET Core Applications, you'll learn how to prevent attackers exploiting personal information, passwords, credit card numbers, or other sensitive data. First, you'll learn how to classify your data, determining what is potentially sensitive. Next, you'll discover the protection controls you need to consider when working with sensitive data. Finally, you'll explore how cryptographic and tokenization techniques can help keep this data safe while remaining usable. When you're finished with this course, you'll have the skills and knowledge needed to protect your system's sensitive data from potential exposure.

What's inside

Syllabus

Course Overview

Identifying Sensitive Data in Applications

Preventing Common Web Application Vulnerabilities

Protecting Stored Data Using Cryptography

Protecting Stored Data Using Data Tokenization

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Teaches techniques to protect sensitive data from theft or exposure, which is essential for web developers

Covers both encryption and tokenization techniques for protecting data

Instructor Matt Tester is recognized for their work in protecting sensitive data

Suitable for IT professionals, web developers, and security analysts

Instructor Matt Tester are recognized for their work in application security

Provides a solid foundation for protecting sensitive data in web applications

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Protecting Sensitive Data From Exposure in ASP.NET 3 and ASP.NET Core 3 Applications with these activities:

Review topics in cryptography

Show steps

Revisiting and solidifying basic concepts of cryptography will ensure that you are prepared to understand the core concepts covered in this course.

Browse courses on Cryptography

Show steps

Review symmetric encryption algorithms
Review public key encryption algorithms
Review hash functions
Review digital signatures

Review cryptography concepts

Show steps

By refreshing your understanding of cryptography concepts, you will have a stronger foundation for understanding the course materials on protecting sensitive data.

Browse courses on Cryptography

Show steps

Review the basics of cryptography, including symmetric and asymmetric encryption.
Explore different cryptographic algorithms and their strengths and weaknesses.

Read "Web Application Security: A Beginner's Guide" by Andrew Hoffman

Show steps

This book provides a comprehensive overview of web application security best practices, helping you understand the concepts and techniques needed to protect your web applications.

View Conflict and Development (Routledge... on Amazon

Show steps

Read the book and take notes on the key concepts.
Apply the principles you learn to your own web applications.

Six other activities

Expand to see all activities and additional details

Show all nine activities

Explore OWASP Top 10 vulnerabilities

Show steps

Familiarizing yourself with the OWASP Top 10 vulnerabilities will help you identify and prevent common security flaws in web applications.

Browse courses on Web Security

Show steps

Review the OWASP Top 10 vulnerabilities and their descriptions.
Identify potential vulnerabilities in your own web applications.
Implement security measures to address the vulnerabilities.

Practice data encryption and decryption

Show steps

Practicing data encryption and decryption will help you develop a deeper understanding of how these techniques work and how to apply them effectively.

Browse courses on Cryptography

Show steps

Implement a simple encryption algorithm in your preferred programming language.
Use a cryptographic library to encrypt and decrypt data.
Test your encryption and decryption code with different inputs.

Volunteer for a non-profit organization that focuses on data security

Show steps

Volunteering for a non-profit organization that focuses on data security will provide you with hands-on experience and insights into the challenges and best practices in the field.

Browse courses on Data Security

Show steps

Identify a non-profit organization that aligns with your interests.
Contact the organization and inquire about volunteer opportunities.
Attend training or workshops to prepare for your volunteer role.
Participate in data security-related activities, such as vulnerability assessments or awareness campaigns.

Develop a data protection plan

Show steps

Creating a data protection plan will help you identify and address potential risks to sensitive data and ensure that appropriate security measures are in place.

Browse courses on Data Protection

Show steps

Identify the sensitive data that needs to be protected.
Assess the risks and vulnerabilities associated with the data.
Develop and implement security controls to mitigate the risks.
Monitor and review the data protection plan on a regular basis.

Contribute to an open-source project related to data security

Show steps

Contributing to an open-source project related to data security will allow you to apply your knowledge and skills while also making a valuable contribution to the community.

Browse courses on Open Source

Show steps

Identify an open-source project that aligns with your interests and skills.
Review the project's documentation and codebase.
Submit a pull request with your contributions.

Participate in a data security hackathon

Show steps

Participating in a data security hackathon will challenge you to apply your skills in a real-world setting and to learn from others in the field.

Show steps

Find a data security hackathon that aligns with your interests.
Form a team or work independently.
Develop a solution to the hackathon challenge.
Present your solution to a panel of judges.

Career center

Learners who complete Protecting Sensitive Data From Exposure in ASP.NET 3 and ASP.NET Core 3 Applications will develop knowledge and skills that may be useful to these careers:

Data Architect

Understanding how to handle sensitive data can be invaluable to a Data Architect. This course can help with identifying data that warrants additional protection, and selecting the appropriate approach to safeguard that data. This can improve your effectiveness as a Data Architect, and may even help you to advance your career.

See salaries and explore the career path for Data Architect

Software Engineer

Most Software Engineers will encounter situations, particularly in web application development, where they will need to handle sensitive data securely. This course can help equip you to fulfill such responsibilities more effectively. This could lead to career advancement opportunities, or simply make you a more valuable member of your current team.

See salaries and explore the career path for Software Engineer

Security Engineer

A Security Engineer will be expected to take the lead on identifying, assessing, and mitigating security risks. Sensitive data is one of the most important things you'll be expected to protect. This course teaches you how to quickly and effectively secure sensitive data, helping you become a more effective and efficient Security Engineer.

See salaries and explore the career path for Security Engineer

Security Analyst

A Security Analyst must stay ahead of the curve in order to identify the latest threats to an organization. One important element of this role is protecting sensitive data from potential exposure. This course can teach you the skills needed to do that.

See salaries and explore the career path for Security Analyst

Cloud Engineer

Cloud Engineers can improve their effectiveness at protecting applications, data, and systems by understanding how to protect sensitive data. This course may be particularly helpful to Cloud Engineers working with cloud-based storage and deployment systems.

See salaries and explore the career path for Cloud Engineer

Information Technology Auditor

Information Technology Auditors are responsible for assessing the security of systems and data. As such, they must have a thorough understanding of data security best practices. This course can provide you with the information needed to improve your ability to carry out security audits effectively.

See salaries and explore the career path for Information Technology Auditor

Database Administrator

Database Administrators are responsible for all aspects of database management and maintenance. This includes administering security. While most of the course material is beyond the scope of a Database Administrator, understanding the material covered in the first module can be helpful for identifying sensitive data in databases.

See salaries and explore the career path for Database Administrator

Software Tester

Software Testers primarily work with finding bugs and other issues in software. Some Software Testers may specialize in security testing. For security testers, this course can help improve testing effectiveness when it comes to data security.

See salaries and explore the career path for Software Tester

Data Scientist

Data Scientists use data to answer questions and solve problems. In the context of data security, this course can improve your ability to identify sensitive data within the context of an application's data.

See salaries and explore the career path for Data Scientist

IT Compliance Specialist

IT Compliance Specialists help ensure that an organization's IT systems comply with laws and regulations. This course can provide information that is useful for understanding relevant regulations, and the course's focus on identifying sensitive data is helpful.

See salaries and explore the career path for IT Compliance Specialist

Systems Administrator

Systems Administrators are responsible for maintaining and securing an organization's computer systems. While most of the course material may be beyond the day-to-day work of a systems administrator, the course can be useful for building a foundation in data security.

See salaries and explore the career path for Systems Administrator

Systems Analyst

Systems Analysts typically help design, build, or maintain an organization's information technology systems. The material in this course is beyond the scope of most Systems Analysts, but it can provide a helpful foundation for understanding how an application's design and implementation can impact data security.

See salaries and explore the career path for Systems Analyst

Information Security Manager

An Information Security Manager is responsible for overseeing the development, implementation, and maintenance of an organization's information security program. This course can help improve your understanding of data security, which may be helpful for your day-to-day responsibilities.

See salaries and explore the career path for Information Security Manager

Cryptographer

Cryptographers design and implement methods for securing information. This course may be useful for Cryptographers who want to specialize in securing applications, data, or systems.

See salaries and explore the career path for Cryptographer

Computer Forensic Examiner

A Computer Forensic Examiner analyzes digital devices in order to uncover evidence of digital crimes or misconduct. This course may be helpful for understanding data security techniques used by cybercriminals.

See salaries and explore the career path for Computer Forensic Examiner