Improving Web Application Security: Threats and Countermeasures

For additional related reading, refer to the following resources:

• For more information about using DPAPI from ASP.NET Web applications, see "How To: Create a DPAPI Library" in the "How To" section of "Microsoft patterns & practices Volume I, Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication " at http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT07.asp .

• For more information about secure coding guidelines for the .NET Framework, see MSDN article, "Secure Coding Guidelines for the .NET Framework," at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/seccodeguide.asp .

• Michael Howard discusses techniques for writing secure code and shows you how to add them in your own applications in his MSDN column, "Code Secure," at http://msdn.microsoft.com/ columns /secure.asp .