Improving Web Application Security: Threats and - CGISecurity

820 Improving Web Application Security: Threats and Countermeasures To create a test Web application1. Add a new C# ASP.NET Web application project to your current solution.2. Add a reference to the Dataprotection.dll assembly.3. Add the following fields to Webform1.aspx.●●●●●An input field for the data to encrypt. Use the ID txtDataToEncrypt.A field for the encrypted data. Use the ID txtEncryptedData.A field for the decrypted data. Use the ID txtDecryptedData.An Encrypt button. Use the ID btnEncrypt.A Decrypt button. Use the ID btnDecrypt.● A label for an error message. Use the ID lblError.4. Add the following using statement to the top of WebForm1.aspx.cs beneath theexisting using statements.using DataProtection;5. Add the following code for the Encrypt button-click event handler.private void btnEncrypt_Click(object sender, System.EventArgs e){DataProtector dp = new DataProtector(DataProtector.Store.USE_MACHINE_STORE );try{byte[] dataToEncrypt = Encoding.ASCII.GetBytes(txtDataToEncrypt.Text);// Not passing optional entropy in this example// Could pass random value (stored by the application) for added security// when using DPAPI with the machine store.txtEncryptedData.Text =Convert.ToBase64String(dp.Encrypt(dataToEncrypt,null));}catch(Exception ex){lblError.ForeColor = Color.Red;lblError.Text = "Exception." + ex.Message;return;}lblError.Text = "";}