ASP.NET Security

Articles, News, and Resources about ASP.NET Security

Archive for the 'aspnet' Category

ASP.NET 2.0 was a major improvement upon web development everywhere. One very powerful aspect of ASP.NET 2.0 is the ability to make your web application personalizable using the Web Part framework. With the launch of MOSS (Microsoft …
Read more here: Understanding ASP.NET Web Parts
ability application aspect aspnet development framework […]

Read Full Post »

Pingback from Updated: List of AJAX Automated Testing and Debugging Tools | ASP.NET Security.
Here is the original: Updated: List of AJAX Automated Testing and Debugging Tools | ASP …
aspnet automated debugging pingback security testing toolsaspnet, automated, debugging, pingback, security, testing, tools

Read Full Post »

In this second part of a two-part series, you will learn about application security issues related to authentication and authorization, as well as five vulnerabilities commonly found in ASP.NET web-based applications. …
The rest is here: Top 10 Application Security Vulnerabilities in Web.config Files …
application applications aspnet authentication based bbased […]

Read Full Post »

In this second part of a two-part series, you will learn about application security issues related to authentication and authorization, as well as five vulnerabilities commonly found in ASP.NET web-based applications. …
View original here: Top 10 Application Security Vulnerabilities in Web.config Files â?¦
application applications aspnet authentication based commonly […]

Read Full Post »

pretty much a long shot in this age of (justified) security > paranoia…. > > So if that’s a “no”, my real question is - is it possible to get > around this using some sort of raw web interface to the data (most > likely from ASP.NET) …
Here is the original: Accessing hosted SQL […]

Read Full Post »

One of the questions I am often asked is “How can I integrate ASP.NET security with Classic ASP other non-ASP.NET URLs?”. Specifically, people want to know if they can integrate ASP.NET’s Forms Authentication, Role Based Security, …
Original post: Tip/Trick: Integrating ASP.NET Security with Classic ASP and Non …
aspnet aspnets authentication based […]

Read Full Post »

Microsoft ASP.NET contains a vulnerability that can allow a remote attacker to bypass security restrictions and gain unauthorized information.
Go here to read the rest: Microsoft ASP.NET security bypass vulnerability
aspnet attacker bypass remote restrictions security unauthorized vulnerabilityaspnet, attacker, bypass, remote, restrictions, security, unauthorized, vulnerability

Read Full Post »

Here comes our problem; when trying to access this certificate through the asp.net application, we run into a problem - It’s impossible, because the process that runs the web application is ASPNET and doesn’t has the needed credentials …
View original post here: Hosting .NET Assembly in COM+ Situation
access application aspnet certificate […]

Read Full Post »

With this understanding of security in place, you can then begin working through the following chapters on configuring system security, forms authentication, and integrating ASP.NET security with classic ASP …
More here: Professional ASP.NET 2.0 Security, Membership, and Role Management
aspnet authentication classic configuring forms including integrating place security […]

Read Full Post »

Microsoft ASP.NET 2.0 Member/Role Management with IIS, > Part 1, Security and Configuration Overview : > http://msdn2.microsoft.com/en-us/library/aa478958.aspx > > Microsoft ASP.NET 2.0 Member/Role Management with IIS, …
See more here: How to display Administer Website at Runtime through Application ?
aaaspx aspnet configuration library management member overview securityaaaspx, aspnet, […]

Read Full Post »

ASP.NET Security Fundamental Operations. Security in the context of ASP.NET application involves 3 fundamental operations [1,4,5]:. Authentication: the process of validating the identity of a user to allow or deny a request [4,9,10]. …
Here is the original post: Security Features in ASP.NET - Authentication
application aspnet authentication context fundamental identity […]

Read Full Post »

The Health Monitoring system in ASP.NET 2.0 is designed to monitor the health of a running ASP.NET application in a production environment. This article is one of an ongoing series on the Health Monitoring system. …
The rest is here: Health Monitoring in ASP.NET 2.0: Raising Custom Events
application article aspnet environment health […]

Read Full Post »

Microsoft’s patterns and practices group recently published their ASP.NET 2.0 Security Best Practices. If you haven’t read this document, I encourage you to do so as security is everyone’s responsibility ( unfortunately ). …
Read the original post: ASP.NET Security
aspnet document encourage group patterns practices published responsibility securityaspnet, […]

Read Full Post »

… is also frequently not disabled again after the problem is resolved. Impact It may be possible to disclose sensitive information about the web sever the ASP.NET application. References HOW TO: Disable Debugging for ASP.NET Applications.
Read more from the original source: ASP.NET Debugging Enabled Security Vulnerability
application applications aspnet debugging disable […]

Read Full Post »