.NET Security Cheatsheet

From OWASP
Revision as of 17:28, 20 November 2012 by Bill Sempf (Talk | contribs)

Jump to: navigation, search

DRAFT CHEAT SHEET - WORK IN PROGRESS

Introduction

This page intends to provide quick basic .NET security tips for developers.

The .NET Framework

The .NET Framework is Microsoft's principal platform for line of business development. It is the supporting API for ASP.NET, Windows Desktop applications, Windows Communication Foundation services, SharePoint, Visual Studio Tools for Office and other technologies.

Updating the Framework

The .NET Framework is kept up-to-date by Microsoft with the Windows Update service. Developers do not normally need to run seperate updates to the Framework. Windows update can be accessed at http://windowsupdate.microsoft.com/ or from the Windows Update program on a Windows computer.

.NET Framework Guidance

ASP.NET Web Forms Guidance

ASP.NET MVC Guidance

XAML Guidance

Windows Forms Guidance

WCF Guidance

Authors and Primary Editors

Troy Hunt - troyhunt [at] hotmail.com
Bill Sempf - bill [at] pointweb.net
Patrick Leclerc - patrick.leclerc [at] owasp.org
Jerry Hoff - jerry.hoff [at] owasp.org


Other Cheatsheets

OWASP Cheat Sheets Project Homepage

Developer Cheat Sheets (Builder)

Assessment Cheat Sheets (Breaker)

Mobile Cheat Sheets

OpSec Cheat Sheets (Defender)

Draft Cheat Sheets