Session will cover topics about security testing and theory of attacks. Presenter will touch each of the possible threats like: Injection, Cross-Site Scripting (XSS), Broken Authentication and Session Management, Insecure Direct Object References, Cross-Site Request Forgery (CSRF), Security Misconfiguration (NEW), Insecure Cryptographic Storage, Failure to Restrict URL Access, Insufficient Transport Layer Protection, Unvalidated Redirects and Forwards (NEW) and how to prevent them in .NET.