1
00:00:04,990 --> 00:00:07,440
Hello everyone. My name is David Berry,

2
00:00:07,440 --> 00:00:09,270
and welcome to my course, Protecting

3
00:00:09,270 --> 00:00:11,170
Against XML External Entity and

4
00:00:11,170 --> 00:00:14,060
Deserialization Attacks in ASP.NET and

5
00:00:14,060 --> 00:00:17,180
ASP.NET Core Applications. You wouldn't

6
00:00:17,180 --> 00:00:19,380
think that XML or JSON data could be used

7
00:00:19,380 --> 00:00:21,320
to attack your applications, but it is

8
00:00:21,320 --> 00:00:23,580
possible. In this course, I'll show you

9
00:00:23,580 --> 00:00:25,910
three different attacks, XML External

10
00:00:25,910 --> 00:00:28,510
Entities attack, the XML Bomb attack, and

11
00:00:28,510 --> 00:00:30,770
the Insecure Deserialization attack, that

12
00:00:30,770 --> 00:00:33,720
all use some form of XML, JSON or binary

13
00:00:33,720 --> 00:00:36,810
serialized data to attack an application.

14
00:00:36,810 --> 00:00:38,540
I'll show you how each attack works and

15
00:00:38,540 --> 00:00:40,160
what you need to do to defend your

16
00:00:40,160 --> 00:00:42,960
applications against them. Before starting

17
00:00:42,960 --> 00:00:44,300
this course, you should be comfortable

18
00:00:44,300 --> 00:00:46,060
with the fundamentals of a .NET language

19
00:00:46,060 --> 00:00:48,520
like C#. You should also have some basic

20
00:00:48,520 --> 00:00:51,500
knowledge of how XML and JSON work. By the

21
00:00:51,500 --> 00:00:52,950
end of this course, you'll know everything

22
00:00:52,950 --> 00:00:54,820
you need to secure your applications

23
00:00:54,820 --> 00:00:57,220
against each of these attacks. I hope

24
00:00:57,220 --> 00:00:58,920
you'll join me on this journey to learn

25
00:00:58,920 --> 00:01:00,570
how to protect your applications against

26
00:01:00,570 --> 00:01:09,000
XML External Entity and Deserialization attacks with this course, on Pluralsight.

