NashTech Insights

Security

Posts by categories

Posts by tags

Designing testcases for security testing

Introduction Security testing, which aims to find flaws and vulnerabilities in an application’s infrastructure, codebase, and interactions, is an essential step in the software development process. Designing testcases for security testing is a crucial aspect of this process. This involves creating test cases that simulate various attack scenarios and vulnerabilities, allowing for a comprehensive assessment …

Designing testcases for security testing Read More »

Mobile app with offline storage feature High Level Architecture

A random crash on mobile app due to large database operations

How large database operations made a mobile app crash randomly? How did we investigate this issue? What was our solution? What was the results and lessons learned? Following is our journey to solve this hard-to-reproduce issue and lessons we learned along the way. The context One day, our client reported a critical issue of randomly …

A random crash on mobile app due to large database operations Read More »

Coding on a computer screen

Common Misconceptions in C# and .NET – SQL Injection

In this section, we will address the issue of SQL injections, which is a longstanding that demands utmost caution due to its severe consequences. Let’s examine the problem of SQL injection in detail. Suppose we have a query that retrieves the “city” value from an HTML Form submitted, and we make the decision to directly …

Common Misconceptions in C# and .NET – SQL Injection Read More »

Coding on a computer screen

Common Misconceptions in C# and .NET – Not Properly Hiding Your Secrets

We will explore the proper handling of sensitive information in the .NET development environment. Specifically, we will focus on protecting secrets used during development. These secrets refer to sensitive information used in the development environment. Consider a scenario where two developers are working on a project, each requiring their own dedicated passwords to connect to …

Common Misconceptions in C# and .NET – Not Properly Hiding Your Secrets Read More »

cyber security, internet security, computer security-1914950.jpg

Common Misconceptions in .NET – Misusing Cookies

In this section, we will address the issue of misusing cookies, focusing on cross-site request forgery. Let’s consider a scenario where a user interacts with a browser and intends to visit a bank’s website, the user sends a login request and receives a cookie from the bank as a result. This cookie allows the user …

Common Misconceptions in .NET – Misusing Cookies Read More »

password, security, dump-704252.jpg

Common Misconceptions in .NET – Not Properly Hashing Passwords

Let’s explore a prevalent security flaw where developers fail to properly hash users’ password. Understanding the significance of hashing is crucial. Let’s consider a scenario where a user register on a form by entering their username and password. During this registration process, we store the username and password in plain text format in our database. …

Common Misconceptions in .NET – Not Properly Hashing Passwords Read More »