16

I am planning to start a new web site on ASP.NET MVC 2 (3).

Does anybody have a full (if possible) check list of actions or approaches I should go through to avoid most security issues?

Improve this question
2

3 Answers 3

Reset to default
6

Based on this blog post, I'm using POSTs for all my JSON data. This underscores a few items in the Codevanced checklist pasted here.

Improve this answer
1
  • 1
    That blog post is a great illustration of JSON prototype hijacking. Thank you for the link.
    – D.W.
    Commented Sep 5, 2011 at 19:07
5

Barry Dorans, author of Beginning ASP.NET Security, provides some good material on the subject. I read his book and he covers a lot of ASP.NET MVC specific material.

If you are looking for a check list of application security controls, be sure to also check out the OWASP ASVS project.

Improve this answer
1
  • Well, there's a chapter on it, but most of the book is core concepts which cover both webforms and MVC. Thanks for the recommendation :)
    – blowdart
    Commented Nov 19, 2010 at 22:47
5

Here's a video series on how to hack proof your asp.net sites, it is two videos of about 50min where he also includes an introduction to the topic, he also includes examples, I havn't seen all of it yet, but I think it will cover some of your questions, or atleast give you som inspiration.

http://vimeo.com/28284123

Improve this answer
1
  • 1
    Hi @psalomonsen, welcome to Information Security! Can you please edit your answer to include a summary, instead of just linking? See the FAQ, and How to Answer.
    – AviD ♦
    Commented Sep 5, 2011 at 13:17

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .