AI Transformation Solutions For Technology Leaders
Intertech .NET 10 Secure Coding Course
(3 days)
Intertech’s training is developed and delivered by senior software consultants who solve complex technology challenges for clients every day.
Rather than teaching security from a purely academic perspective, our instructors bring real-world experience gained from designing, building, modernizing, and securing enterprise applications across a wide range of industries. Every topic, demonstration, and lab is grounded in proven practices that have been applied in production environments, giving students practical knowledge they can immediately use in their own projects. This consulting-first approach ensures the training reflects today’s technologies, emerging threats, and the engineering decisions developers face in the real world.
Planning
Intertech’s software planning & requirement analysis process sets the foundation for the entire software development process.
Architecture & Design
Our software architecture and system design stage lays the groundwork for successful software implementation by providing a clear roadmap for building the system.
Custom Development
Intertech experts help you select languages and implement coding standards and development practices that are well-informed & collaborative when updating or creating new web -based and desktop applications.
Quality Assurance
Intertech brings a comprehensive and integrated approach to software quality assurance (QA) and testing that fosters a commitment to delivering software of the highest quality.
Testing
Each type of test serves a specific purpose in the software development process, contributing to the overall quality and reliability of the software. The choice of tests depends on the project’s requirements, goals, and the nature of the software being developed.
Cloud Migration & Integration
Work with a team that understands cloud migration and cloud integration, as well as application architecture and development, so you get the “cloud full stack” experience from your dev-team.
Course Outline and Curriculum
Course Overview
Modern software development demands far more than writing functional code.
Students will leave with a practical understanding of modern secure coding practices, secure API and cloud development, DevSecOps, supply-chain security, AI security, and the latest defensive techniques used by today’s leading engineering organizations. Whether you are responsible for developing enterprise applications, modernizing existing systems, or preparing your teams for evolving security requirements, this course provides immediately applicable skills that help reduce organizational risk while producing more resilient, secure, and maintainable software.
Course Curriculum
DAY 1 — .NET 10 Foundations + Core Security Concepts
This course is based on .NET 10 (current version) and will include the latest security programming topics.
New Outline: Modern .NET 10+ Secure Coding Course (3 Days) Coder-Focused • Code-Heavy • Lab-Driven • Future-Proof Includes Appendix A for optional Navy/DoD delivery
1) .NET 10+ Refresher
- What’s new in .NET 10
- Unified BCL (no .NET Framework, no .NET Standard)
- Minimal APIs
- Modern DI container
- Middleware pipeline
- Native AOT and trimming
- System.Text.Json
- Modern hosting model (Kestrel-first)
- Modern async/await patterns Lab 0: Build a minimal API from scratch
- Cybersecurity for Modern Developers
- Thinking like an attacker
- Threat modeling (STRIDE, DREAD, PASTA)
- OWASP Top 10 (2021+)
- CWE/SANS Top 25
- Secure SDLC and DevSecOps
- API-first security
- Reducing attack surface
Lab 1: Threat model a .NET 10 application
2) Modern .NET Runtime Security
- .NET 10 runtime architecture
- Removal of CAS and AppDomains
- AssemblyLoadContext
- Cross-platform runtime differences
- Self-contained deployments
- Trimming and Native AOT
- Strong-naming today
- IL inspection (ILSpy, dnSpyEx)
- Obfuscation in modern .NET
- Secure configuration (appsettings.json, secrets.json)
Lab 2: Reverse engineer and harden a .NET app
3) Modern Cryptography in .NET 10
- AES-GCM
- ChaCha20-Poly1305
- RSA OAEP
- ECDSA/ECDH
- Argon2id password hashing
- PBKDF2 vs bcrypt vs scrypt
- TLS 1.3
- Platform crypto differences (CNG vs OpenSSL)
Lab 3: Build a secure encryption utility
4) Secure Coding Fundamentals
- Input validation
- Output encoding
- Injection prevention
- Secure error handling
- Logging without leaking secrets
- Safe file handling
- Memory safety in unsafe code
Lab 4: Fix vulnerabilities in a purposely insecure .NET 10 app
Course Curriculum
DAY 2 — Web, API, SPA, and Cloud Security
5) .Securing ASP.NET Core 10
- Minimal APIs vs MVC
- Model binding attacks
- Overposting
- Anti-forgery tokens
- CORS misconfigurations
- HTTPS enforcement
- Cookie security
- Rate limiting middleware
- Data Protection API
Lab 5: Harden an ASP.NET Core application
6) .API Security (Modern Identity)
- OAuth2
- OpenID Connect
- JWT security
- Token replay attacks
- Refresh token rotation
- API gateway patterns
- HMAC signatures
- Mutual TLS
Lab 6: Build a secure API with JWT and refresh tokens
7) SPA Security (Angular, React, Vue)
- npm supply-chain attacks
- Dependency poisoning
- DOM-based XSS
- Trusted Types
- Content Security Policy (CSP)
- Secure routing
- PKCE for SPAs
Lab 7: Secure a SPA with CSP, DOMPurify, and PKCE
8) .Cloud and Container Security
- Docker security
- Container image scanning
- Kubernetes basics
- Secrets in containers
- Kestrel hardening
- Reverse proxy patterns
- Cloud identity (Azure AD / Entra ID)
Lab 8: Secure a containerized .NET 10 application
–
Course Curriculum
DAY 3 — DevSecOps, Supply-Chain, Logging, AI Security
9) DevSecOps and Supply-Chain Security
- GitHub/GitLab/Azure DevOps security
- Branch protection
- SAST (static analysis)
- SCA (dependency scanning)
- Secret scanning
- SBOM generation
- NuGet package trust
- Dependency poisoning attacks
Lab 9: Secure a CI/CD pipeline and generate an SBOM
10) Logging, Telemetry, and Incident Response
- OpenTelemetry
- Structured logging
- PII redaction
- Audit trails
- Log tampering prevention
- SIEM integration
Lab 10: Build a secure logging layer with redaction and correlation IDs
11) AI Security (Prompt Injection and LLM Integration)
- Prompt injection
- Data exfiltration via LLMs
- Secure LLM API usage
- Sanitizing user prompts
- Guardrails
- AI-assisted code generation risks
- NIST AI RMF
Lab 11: Secure an AI-powered feature against prompt injection
Appendix A
Defense-Specific Secure Coding (Optional Module)
- A.1 DoD cybersecurity frameworks (CMMC, NIST 800-53/171, STIGs)
- A.2 CAC/PIV authentication and DoD PKI
- A.3 Air-gapped development and offline package feeds
- A.4 Zero-trust enforcement
- A.5 Secure deployment in restricted networks
- A.6 Defense-grade logging and auditing
- A.7 Handling classified vs unclassified code
- A.8 DoD supply-chain requirements
Take a few minutes to complete the assessment and gain a clear, practical view of your organization’s AI readiness—and what to do next.
“Intertech has been an invaluable partner for our business. They have enabled us to implement automation in our finance business that is seldom present in organizations 10 times our size. They are responsive, innovative and absolutely committed to their customer’s success. You can frequently find vendors that meet your needs, but with Intertech, we have found a strategic partner who is just as committed to our success as we are.“
Chief Technology Officer | Microf