ASP.NET Security

ASP.NET secure coding quidelines on cross-site scripting, SQL injection attacks, forms authentication, hashing and salting passwords, input validation, etc.
Create Custom RoleProvider for ASP.NET Role Permissions and Security

Just as with a Custom MembershipProvider, one can create a Custom RoleProvider in ASP.NET to handle role-based permissions and security. In this 5 minute tutorial I am going to create a custom roleprovider, called SimpleRoleProvider, that only allows users in the "Admin" role to view a page. Read more...

posted @ Wednesday, October 17, 2007 12:07 PM | Feedback (0)

Microsoft Developer Security Resource Kit - Security Best Practices CheckLists and Developer Tools

posted @ Sunday, January 22, 2006 7:55 PM | Feedback (0)

Encrypt Connection Strings AppSettings and Web.Config in ASP.NET 2.0 - Security Best Practices

posted @ Thursday, November 17, 2005 10:49 PM | Feedback (0)

SQL Injection Attacks - Parameterized Queries - Regular Expressions - ASP.NET Security Best Practices

posted @ Monday, October 24, 2005 2:21 PM | Feedback (0)

Cross-Site Scripting - ASP.NET Security - RegularExpressionValidator Control and Regex.IsMatch - HttpUtility.HtmlEncode

posted @ Sunday, October 23, 2005 6:49 PM | Feedback (0)

.NET Security Risks and Vulnerabilities - Digital Blackbelt Series - Defend Your .NET Code

posted @ Friday, January 21, 2005 9:37 PM | Feedback (2)

ASP.NET Vulnerability - Programmatically Check for Canonicalization Issues with ASP.NET - ASP.NET Web Developers - Florida

posted @ Monday, October 11, 2004 9:20 PM | Feedback (1)

Good Regular Expression to Enforce Password Complexity in ASP.NET Applications

posted @ Saturday, September 25, 2004 6:16 PM | Feedback (1)

SQL Injection Attacks - Testing Vulnerabilities - Validating Input - Handling Exceptions - Hashing Passwords - Encrypting Connection Strings

posted @ Friday, August 20, 2004 4:35 AM | Feedback (1)

Creating Great ASP.NET Web Applications - Top Ten Tricks for a Killer Web Application - TechEd 2004 - DEV310

posted @ Friday, May 28, 2004 7:46 AM | Feedback (1)

Full ASP.NET Security Archive

Main

News

Green Tea

.NET Development

Enterprise Library

Patterns & Practices