Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm familiar with the OWASP top 10, for web applications. Is there something simular for BizTalk applications?

share|improve this question
All standard secure coding principles apply. There is not a handy Top 10 list for specific vendor frameworks. – schroeder Dec 12 '12 at 0:26
up vote 2 down vote accepted

The OWASP Top 10 is not language specific; it is applicable for all web applications. The CWE Top 25 is the most generally used list for non-web applications. That's probably what you're looking for.

If you want something language specific, it'd be most helpful to look for a biztalk security guidance or a BizTalk hardening guide and also to obey common practices like treating all user input as malicious.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.