July: Reducing the Attack Surface of a .Net OWIN Website

Arrive and eat: 6 to 6:30
Presentation by Clarke Bowers: 6:30 to around 7:30
Q&A, closing: 7:30 to 8

OWIN is an alternative to the IIS HTTP pipeline. It provides explicit control of the exposed surface of your web application. OWIN runs in a variety of environments: Window Server, Windows EXE, IIS Application, Linux. It optionally support ASP.NET, Routing and MVC. Topics covered will be: pipeline, file exposure, routing, REST services, SQL injection, Entity Framework and OData. By understanding how these facilities work, you have expose only the services you want to the web.
~~~~~
Clarke Bowers is an inventor and software architect with more than 35 years of software engineering experience. He owns Clarke Bowers Consulting, which provides software development services for security-conscious clients such as Becton Dickinson, Exelon, the American Institute of Certified Public Accountants, the Naval Research Library, and the Mexican Government's voting system. His interests include object-oriented design, n-tier knowledge, IoT and cloud development, and a broad range of languages, databases, tools, and technologies.

Clarke holds a Bachelor of Science degree in Computer Science from Lehigh University and is a Microsoft Certified Solution Developer. He owns five patents. Learn more: http://www.cbsoftwareengineering.com/#patents-content