Security Guidelines and Recommendations

There's a great deal of good prescriptive security guidance out there in the form of whitepapers and books.

Whitepapers

• patterns & practices Security Guidance for .NET Framework 2.0
• patterns & practices ASP.NET 2.0 Security Guidance
• patterns & practices ASP.NET 1.1 Security Guidance
• Improving Web Application Security: Threats and Countermeasures
• Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication
• Threat Modeling Web Applications - patterns & practices
  This guidance presents the patterns & practices approach to creating threat models for Web applications. Threat modeling is an engineering technique you can use to help you identify threats, attacks, vulnerabilities, and countermeasures that could affect your application.
• Reference Solution: ASP.NET 2.0 Internet Security Reference Implementation - Pet Shop Case Study
  This solution architecture illustrates and implements security guidance as it applies to an Internet facing ASP.NET 2.0 web application. The guidelines in this document are based upon “Security Guidelines: ASP.NET 2.0” and “Security Guidelines: .NET Framework 2.0”, however they are specific to the Internet scenario and are placed within the context of a full sample application in a development environment. This solution architecture uses the Pet Shop 4 sample application as a baseline. Pet Shop 4 has been updated in order to represent a reference implementation for ASP.NET 2.0 security best practices.

 Code Review Checklists

• Security Checklist: .NET Framework 2.0
• Security Checklist: ADO.NET 2.0
• Security Checklist: ASP.NET 2.0

Enjoy!

You must Login to comment.