How to use ASP.NET forms-based authentication or Windows authentication to help secure a site.
This Pluralsight video provides an overview of security practices for an ASP.NET MVC application.
This blog post covers many important security considerations in ASP.NET MVC.
By Rick Anderson||Level 300 : Intermediate
Cross-site request forgery (also known as XSRF or CSRF) is an attack against web-hosted applications whereby a malicious web site can influence the interaction between a client browser and a web si...
This series of blog posts by Troy Hunt describes the Open Web Application Security Project (OWASP) and covers the 10 most critical web application security risks.
This tutorial shows how to create and deploy a secure ASP.NET MVC 4 app using OAuth, the membership database with SQL data.
This video analyzes XSS, CSRT, and JSON hijacking.
This tutorial describes how to create an intranet application using ASP.NET MVC and how to secure it using Windows authentication and authorization.
This tutorial shows you how to enable authentication for web applications hosted on Windows Azure Web Sites using Windows Azure Active Directory .
This walkthrough shows you the functionality that is provided by default for ASP.NET forms authentication in an ASP.NET MVC application.
By Jon Galloway|
This tutorial explains how you can prevent open redirection attacks in your ASP.NET MVC applications. This tutorial discusses the changes that have been made in the AccountController in ASP.NET MVC...
In this blog post, Rick Anderson describes some security pitfalls for MVC applications and how to avoid them.
See "Securing ASP.NET MVC applications" in the ASP.NET MVC Content Map.
This whitepaper covers the major ways in which security features in ASP.NET 4 can be customized, including: Encryption options and functionality in the <machineKey> element, interoperability of ASP.NET 4 forms authentication tickets with ASP.NET 2.0, configuration options to relax automatic security checks on inbound URLs, pluggable request validation, and pluggable encoding for HTML elements, HTML attributes, HTTP headers, and URLs
By Tom FitzMacken|
This tutorial shows you how to build an ASP.NET MVC 4 web application that enables users to log in with credentials from an external provider, such as Facebook, Twitter, Microsoft, or Google, and t...