Difference between revisions of ".NET Security for Architects"

From OWASP
Jump to: navigation, search
(Areas of Concern)
(Articles & Projects)
 
(5 intermediate revisions by one user not shown)
Line 1: Line 1:
 
{| align="right" class="wikitable"
 
{| align="right" class="wikitable"
 
|-
 
|-
! .NET Security Quick Reference
+
! OWASP .NET Quick Reference
 
|-  
 
|-  
 
|  
 
|  
Line 21: Line 21:
 
*[[.NET Threat Modeling | Security Requirements & Threat Modeling]]
 
*[[.NET Threat Modeling | Security Requirements & Threat Modeling]]
  
*Design Review
+
*[[.NET Design Review | Design Review and Checklists]]
  
*Requirements Testing
+
*[[Separating Roles - Build Systems and Software Promotion]]
  
*Implementation
+
*[[Data Loss Prevention Concerns]]
 
+
*Separating Roles - Build Systems and Software Promotion
+
 
+
*Protecting Data in Motion and at Rest (Data Loss Prevention)
+
  
 
===Articles & Projects===
 
===Articles & Projects===
Line 40: Line 36:
  
 
[http://en.wikipedia.org/wiki/WS-%2A Web Service Specifications]
 
[http://en.wikipedia.org/wiki/WS-%2A Web Service Specifications]
 +
 +
[http://www.codeplex.com/WCFSecurity Security Guidance for Windows Communication Foundation]
  
 
===References===
 
===References===
Line 53: Line 51:
  
 
===Tools===
 
===Tools===
 +
[http://www.microsoft.com/downloads/details.aspx?familyid=59888078-9daf-4e96-b7d1-944703479451&displaylang=en Microsoft Threat Analysis & Modeling v2.1.2]

Latest revision as of 22:47, 15 May 2008

OWASP .NET Quick Reference

Contents

.NET Security for Architects

Security concerns must be addressed at the architectural level. This section is to provide tools and guidance for the .NET architect.

Areas of Concern

Articles & Projects

ASP.NET Security Architecture

Security Engineering

Solutions to SOA Security

Web Service Specifications

Security Guidance for Windows Communication Foundation

References

International Association of Software Architects

Patterns and Practices

Patterns and Practices Security Wiki

Microsoft Security Development Lifecycle 3.2


Tools

Microsoft Threat Analysis & Modeling v2.1.2