.NET Data Security - Hope is Not a Strategy

Explore essential data security strategies for .NET developers in this comprehensive conference talk. Learn how to protect sensitive information using the .NET Framework, covering crucial aspects of cryptography including random number generation, hashing techniques, and authenticated hashing. Dive into password-based key derivation functions and understand the differences between symmetric and asymmetric encryption methods such as DES, Triple DES, AES, and RSA. Discover how to implement a robust hybrid encryption scheme combining AES, RSA, HMACs, and digital signatures to ensure confidentiality, integrity, non-repudiation, and authentication. Gain practical insights on secure password storage and the importance of moving beyond hope as a security strategy. By the end of this talk, you'll be equipped with the knowledge to fulfill your duty as a software developer in safeguarding your employer's data effectively.

Intro
Supplemental Materials
What This Talk Is
What is Cryptography?
Examples of Cryptography
Random Numbers
Hashing -MD5
HashMessage Authentication Codes HMAC
Message Authentication Codes - HMAC
Secure Password Storage
Symmetric Encryption - AES
Asymmetric Encryption - RSA
Digital Signatures
Quick Recap
Hybrid Encryption - Integrity
Hybrid Encryption - Signature
Further Reading and Support