Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm familiar with the OWASP top 10, for web applications. Is there something simular for BizTalk applications?

share|improve this question

closed as off-topic by schroeder Feb 24 at 22:49

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

3  
All standard secure coding principles apply. There is not a handy Top 10 list for specific vendor frameworks. – schroeder Dec 12 '12 at 0:26
    
We tried to edit it to make it more general, and hence, on topic, but you rejected the edit. As such, it is closed again. – schroeder Feb 24 at 22:50
    
To the OP - The reason I edited the question is that it's off-topic as it stands. We don't want to propagate repetitive "OWASP for [specific application type]" questions. – Xander Feb 24 at 22:50
    
@Xander If this kind of question is not desired as-is, then please close / delete it, but don't edit it to be something it is not intended to be. The accepted answer is specific for BizTalk as well, so when changing the question you would need to change the answer as well. – oɔɯǝɹ Feb 25 at 15:20
up vote 3 down vote accepted

The OWASP Top 10 is not language specific; it is applicable for all web applications. The CWE Top 25 is the most generally used list for non-web applications. That's probably what you're looking for.

If you want something language specific, it'd be most helpful to look for a biztalk security guidance or a BizTalk hardening guide and also to obey common practices like treating all user input as malicious.

share|improve this answer
    
Great recommendation! Also check out SAFEcode -- safecode.org – atdre Feb 24 at 22:22

Not the answer you're looking for? Browse other questions tagged or ask your own question.