Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 8 down vote favorite
7

I am planning to start a new web site on asp.net mvc 2 (3). Have anybody a full (if possible) check list of actions, approaches I should reach to avoid almost problems with security.

share|improve this question
1  
Related Guidance for HTTPS-only sites – makerofthings7 Oct 1 '11 at 15:17
@makerofthings it's useful and good question – garik Oct 1 '11 at 15:23

3 Answers

up vote 4 down vote

Barry Dorans, author of Beginning ASP.NET Security, provides some good material on the subject. I read his book and he covers a lot of ASP.NET MVC specific material.

If you are looking for a check list of application security controls, be sure to also check out the OWASP ASVS project.

share|improve this answer
+1 for owasp, thanks – garik Nov 14 '10 at 15:07
Well, there's a chapter on it, but most of the book is core concepts which cover both webforms and MVC. Thanks for the recommendation :) – blowdart Nov 19 '10 at 22:47
up vote 4 down vote

Based on this blog post, I'm using POSTs for all my JSON data. This underscores a few items in the Codevanced checklist pasted here.

share|improve this answer
+1 thank for checklist and post – garik Feb 6 '11 at 15:49
That blog post is a great illustration of JSON prototype hijacking. Thank you for the link. – D.W. Sep 5 '11 at 19:07
up vote 3 down vote

Here's a video series on how to hack proof your asp.net sites, it is two videos of about 50min where he also includes an introduction to the topic, he also includes examples, I havn't seen all of it yet, but I think it will cover some of your questions, or atleast give you som inspiration.

http://vimeo.com/28284123

share|improve this answer
1  
Hi @psalomonsen, welcome to IT Security! Can you please edit your answer to include a summary, instead of just linking? See the FAQ, and How to Answer. – AviD♦ Sep 5 '11 at 13:17
+1 thank you... – garik Sep 5 '11 at 14:07

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.