Explained – Cookies

ASP.NET 2.0 Security Videos

J.D. Meier, Keith Brown, Prashant Bansode
Microsoft Corporation

November 2007

This video module shows you how to protect from cookie tampering issues.

Objectives

• View and edit cookies for your own web application to test for security flaws.
• Detect cookie tampering at runtime using a cryptographic keyed hash.

Video

The video is a small wmv file streaming /download:

• Explained – Cookies (Length: 10:35 - Size: 8:04 MB)

Recommended Guidance

• How To: Protect From Injection Attacks in ASP.NET
• How To: Use Regular Expressions to Constrain Input in ASP.NET
• Design Guidelines for Secure Web Applications (See "Input Validation" section)
• Architecture and Design Review for Security (See "Input Validation" section)
• Security Guidelines: ASP.NET 2.0 (See "Input and Data Validation" section)