Security Resources for .NET Web Applications

Web applications have a class of security vulnerabilities, at times much widespread and trivial than the infamous buffer overflow.

.NET Web Application Security

Here are some interesting Security resources on .NET Web Application:

• .NET Security at MSDN – I specially like Improving Web Application Security white paper.
• AntiXSS Library - Microsoft Anti-Cross Site Scripting library to protect web apps from XSS.
• FxCop - A tools which analyses managed code assemblies
• Guidance Explorer – Developer guidance (a 15000 foot view though)
• .NET Security Blogs: Shawnfa, Michael Howard, CLRSecurity
• MSDN Security Developer Center - General guidance on writing secure code. The featured video on exporting and importing certificates would be helpful for doing certificate management as a HealthVault application.
• Update – Threat modeling web applications is a great read. The SDL Threat modeling tool and forum are of great utility as well.

Please leave a comment if you know of any valuable security resources.