10.9. Summary

In this chapter we discussed the fundamentals of testing web applications for security. Security is a broad topic, with entire books published on specialized topics within the security discipline. This chapter was not intended to be the definitive guide to security testing, but to serve as a stepping stone to ensure developers are testing for the most common security vulnerabilities when it comes to development of web applications. It is highly encouraged that you seek out other resources, and learn more about developing secure web applications.

Walking away from this chapter, you should have come to the realization that there are many web applications in production that can be easily attacked. You may even have become aware of potential vulnerabilities to applications you have currently running in production. If you take anything away from this chapter, please remember not to blindly trust input from users, and test early, and test often.

Get Testing ASP.NET Web Applications now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.