Brian Goldfarb's Blog

ASP.NET 2.0

• How To: Prevent Cross-Site Scripting in ASP.NET: http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000004.asp
• How To: Protect From Injection Attacks in ASP.NET: http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000003.asp
• How To: Protect From SQL Injection in ASP.NET: http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000002.asp
• How To: Use Regular Expressions to Constrain Input in ASP.NET: http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000001.asp

Authentication and Authorization

• How To: Use Forms Authentication with Active Directory: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT02.asp
• How To: Use Forms Authentication with SQL Server 2000: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT03.asp
• How To: Create GenericPrincipal Objects with Forms Authentication: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT04.asp

Code Access Security (.NET Framework 1.1)

• How To: Create a Custom Encryption Permission: http://msdn.microsoft.com/library/en-us/dnnetsec/html/HTCustEncr.asp
• How To: Use Code Access Security Policy to Constrain an Assembly: http://msdn.microsoft.com/library/en-us/dnnetsec/html/HTCode_Acc.asp

Communications Security

• How To: Call a Web Service Using Client Certificates from ASP.NET: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT13.asp
• How To: Call a Web Service Using SSL: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT14.asp
• How To: Set Up SSL on a Web Server: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT16.asp
• How To: Set Up Client Certificates: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT17.asp
• How To: Use IPSec for Filtering Ports and Authentication: http://msdn.microsoft.com/library/en-us/dnnetsec/html/HTUseIPSec.asp
• How To: Use IPSec to Provide Secure Communication Between Two Servers: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT18.asp
• How To: Use SSL to Secure Communication with SQL Server 2000: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT19.asp

Configuration

• How To: Create a Custom Account To Run ASP.NET: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT01.asp

Cryptography

• How To: Create a DPAPI Library: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT07.asp
• How To: Create an Encryption Library: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT10.asp
• How To: Store an Encrypted Connection String in the Registry: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT11.asp
• How To: Use DPAPI (Machine Store) from ASP.NET: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT08.asp
• How To: Use DPAPI (User Store) from ASP.NET with Enterprise Services: http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT09.asp