Prompt file imported from ms-mfg-community/project-gengo (.github/prompts/7.01-conduct-security-assessment.prompt.md). Copyright stays with the author.

Conduct Security Assessment

Conduct a comprehensive security assessment of the .NET 8 console calculator application and its associated components. This assessment should include, but is not limited to, the following areas:

1. Code Review: Analyze the source code for common security vulnerabilities such as SQL injection, cross-site scripting (XSS), buffer overflows, and insecure deserialization. Ensure adherence to secure coding practices.
2. Dependency Analysis: Review all third-party libraries and dependencies for known vulnerabilities. Ensure that all dependencies are up-to-date with the latest security patches.
3. Configuration Review: Examine application and infrastructure configurations for security best practices. This includes settings in web.config, appsettings.json, and any cloud service configurations.
4. Authentication and Authorization: Evaluate the implementation of authentication and authorization mechanisms to ensure that they are robust and follow the principle of least privilege.
5. Data Protection: Assess how sensitive data is handled, including data at rest and data in transit. Verify the use of encryption and secure protocols.
6. Logging and Monitoring: Review logging practices to ensure that security-relevant events are logged appropriately and that logs are protected from tampering.
7. Infrastructure Security: If applicable, assess the security of the underlying infrastructure, including network configurations, firewalls, and access controls.