ASP.NET » Security

We have 45 Security tutorials, you can see below:


Validator Controls in ASP.NET


Validator controls in ASP.NET.


Details  •  Read Tutorial  •  Views: 413  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:34

Roles-Based Authentication


Implement a Roles-Based Authentication using ASP.NET Forms Authentication


Details  •  Read Tutorial  •  Views: 330  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:24

Pass-Through Security Authentication (Single Sign-on) using ASP.NET


The Pass-Through authentication enables a user to sign-on to their intranet and access other web applications without being asked for login again.


Details  •  Read Tutorial  •  Views: 273  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:23

Enhanced and Secure Connection Strings in Web.Config


Here we would discuss some simple steps, which would facilitate keeping our database connection strings safe and encrypted in Web.Config.


Details  •  Read Tutorial  •  Views: 255  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:22

Using HTTP Modules To Combat Leeching


An article to demonstrate how HTTP Module-based filtering can prevent leeching.


Details  •  Read Tutorial  •  Views: 247  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:21

Extending Forms Authentication - Windows or Custom Authentication


Combines Forms Authentication with Windows or Custom Authenticator.


Details  •  Read Tutorial  •  Views: 292  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:21

Custom Authentication provider by implementing IHttpModule, IPrincipal and IIdentity


An article on writing Custom Authentication provider in ASP.NET


Details  •  Read Tutorial  •  Views: 361  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:19

Securing image URLs in a website


How to hide image URLs on a website to avoid illegal access, using a custom HttpHandler and encryption.


Details  •  Read Tutorial  •  Views: 246  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:19

Cookieless ASP.NET forms authentication


They say it is not possible to use cookieless forms authentication in .NET. Well it is, and relatively easy to accomplish!


Details  •  Read Tutorial  •  Views: 261  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:09

A Windows logon, web user control implementation - in ASP.NET


A classic example of implementing reusable web user control, with supporting controls and classes to keep the code manageable.


Details  •  Read Tutorial  •  Views: 225  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:08

Single sign-on across multiple applications in ASP.NET


By default, Forms authentication does not support single sing-on accross multiple applications. But is not too complicated to tweak it the appropriate way.


Details  •  Read Tutorial  •  Views: 291  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:07

Simple HTTP Reverse Proxy with ASP.NET and IIS


Learn how easy it is to create HTTP Reverse Proxy in .NET using IIS.


Details  •  Read Tutorial  •  Views: 336  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:06

TripleDES Encrypted Configuration File


How to make your server settings safer


Details  •  Read Tutorial  •  Views: 242  •  Rate: 4 (1 votes)  •  Feb 16 2007 - 07:02

Securing Images under Forms-Based Authentication in ASP.NET Applications


Allows Forms-based authentication to work on non-parsed files such as images.


Details  •  Read Tutorial  •  Views: 245  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:02

Role-based Security with Forms Authentication


Provides insight and tips on using role-based (groups) Forms Authentication in ASP.NET, which has only partial support for roles.


Details  •  Read Tutorial  •  Views: 219  •  Rate: 0 (0 votes)  •  Feb 16 2007 - 07:00

Securely Run the ASP.NET Worker Process as the System Account


Describes the proper way to configure a server to securely run the ASP.NET worker process runs as the system account.


Details  •  Read Tutorial  •  Views: 216  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:14

Preventing Automated / Dictionary Login Attacks without the use of CAPTCHA


A simple way to prevent automated / dictionary login attacks without the use of CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart) images.


Details  •  Read Tutorial  •  Views: 258  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:13

How to make your app secure


If you are into development or quality assurance of enterprise solutions, you must be aware of the security aspect of your application. This article provides a checklist for the same...


Details  •  Read Tutorial  •  Views: 251  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:11

Simple Captcha with ASP.NET


Simple text to image generator to block spammers inserting data to your database, with ASP.NET.


Details  •  Read Tutorial  •  Views: 282  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:10

Extending ASP.NET 2.0 security


The current implementation of ASP.NET 2.0\'s security is great and I have fallen in love with it, but it\'s still too limited. I will show you how to extend ASP.NET 2.0\'s security using a custom HTTP Handler and your existing Web.sitemap.


Details  •  Read Tutorial  •  Views: 225  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:09

Form authentication and authorization in ASP.NET


This article will explain how to secure websites using the ASP.NET Forms Authentication.


Details  •  Read Tutorial  •  Views: 260  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:08

Prevent attacks on your website


Using a simple example, I\'ll explain how to prevent a program that can register thousands of dummy users to your database and play with your database and application performance.


Details  •  Read Tutorial  •  Views: 258  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:07

BaseWeb ISAPI Security Module


This article details a way to perform web security much like ASP 2.0 does it, using an ISAPI Filter.


Details  •  Read Tutorial  •  Views: 251  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:06

Encrypt Password Field in SQL Server, Registry Information & Query String


How to encrypt the database password field, registry information and query string.


Details  •  Read Tutorial  •  Views: 310  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:05

SQL injection attacks


An article on SQL injection attacks.


Details  •  Read Tutorial  •  Views: 274  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:03

Security Tips for Temporary File Usage in Applications


Educate yourself on security best practices for temporary file usage in software applications.


Details  •  Read Tutorial  •  Views: 178  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 13:02

Encrypting Cookies to prevent tampering


In this article, we talk about the lack of Cookie security built-into the ASP.NET framework, and a decent workaround to provide integrated tamper proof security for cookie data.


Details  •  Read Tutorial  •  Views: 268  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 12:59

Web Service and IIS Security hurdles


How to configure IIS in order to enable the use of Named Kernel Objects in Web Services.


Details  •  Read Tutorial  •  Views: 246  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 12:58

Secure File Download Using Basic Authentication


Secure file download using Basic Authentication. The interesting part is that we maintain two separate entry points for uploading and downloading a file.


Details  •  Read Tutorial  •  Views: 256  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 12:58

Restricting Access to trace.axd using IIS Basic Authentication


A technique to use the IIS Basic Authentication mechanism to control access to trace.axd.


Details  •  Read Tutorial  •  Views: 258  •  Rate: 0 (0 votes)  •  Feb 02 2007 - 12:57

Creating a Database-Driven Login Page


Learn how to create a database-driven login page.


Details  •  Read Tutorial  •  Views: 232  •  Rate: 0 (0 votes)  •  Jan 31 2007 - 14:08

Protect non-.NET Assets Using a .NET Reverse Proxy with Forms Authentication and ISAPI


How to protect secure assets using a .NET Reverse Proxy, an ISAPI redirection filter and .NET Forms Authentication


Details  •  Read Tutorial  •  Views: 299  •  Rate: 0 (0 votes)  •  Jan 23 2007 - 14:54

HttpSecureCookie, A Way to Encrypt Cookies with ASP.NET 2.0


Discussing how to encode and tamper-proof text and cookies using the MachineKey, by using reflection.


Details  •  Read Tutorial  •  Views: 363  •  Rate: 0 (0 votes)  •  Jan 23 2007 - 14:53

Switching Between HTTP and HTTPS Automatically: Version 2


An article on automatically switching between HTTP and HTTPS protocols without hard-coding absolute URLs.


Details  •  Read Tutorial  •  Views: 732  •  Rate: 0 (0 votes)  •  Jan 23 2007 - 14:52

Create, Export & Encrypt Connection String on Server and Dev Machine with ASP.Net 2.0


This article covers some basic steps and commands to encrypt your connection string and other items in a configuration file using ASP.NET 2.0.


Details  •  Read Tutorial  •  Views: 254  •  Rate: 0 (0 votes)  •  Jan 22 2007 - 12:06

Encrypt Passwords Using MD5


This code demonstrates how to use an MD5 hash to encrypt user passwords when storing them in a database. There are constantly news items about companies where user information is compromised. By storing passwords using an MD5 hash, even if your database is compromised the passwords cannot be decoded. The only downside is that users cannot retrieve lost passwords, they must reset them.


Details  •  Read Tutorial  •  Views: 325  •  Rate: 0 (0 votes)  •  Jan 22 2007 - 12:04

Implement Role-Based Security with Forms-Based Authentication


This article describes how to implement role-based security in an ASP.NET application that implements forms-based authentication using Visual Basic .NET.


Details  •  Read Tutorial  •  Views: 296  •  Rate: 0 (0 votes)  •  Jan 20 2007 - 17:35

HOW TO: Implement Forms-Based Authentication in Your ASP.NET Application


This article demonstrates how to implement forms-based authentication by using a database to store the users.


Details  •  Read Tutorial  •  Views: 236  •  Rate: 0 (0 votes)  •  Jan 20 2007 - 17:30

ASP.Net's Built-in Web Security


ASP.Net has some new features that allow a developer to easily secure certain areas of a web site. Securing files and folders has always been an option for web applications, but in the past it was necessary to use either a third-party tool like Authentix or to use NTFS and Windows user accounts.


Details  •  Read Tutorial  •  Views: 254  •  Rate: 0 (0 votes)  •  Jan 20 2007 - 17:24

Membership Service


With every new version are added a bunch of new functionality which eases the development of web applications and keeps up to the required security measures to make the applications less susceptible to external threat.


Details  •  Read Tutorial  •  Views: 1232  •  Rate: 5 (1 votes)  •  Aug 22 2005 - 18:35

Authentication in ASP.NET: .NET Security Guidance


This article discusses the importance of security considerations when designing a server application. Both Microsoft Internet Information Services (IIS) and ASP.NET provide security models that will allow you to authenticate your users appropriately and obtain the correct security context within your application.


Details  •  Read Tutorial  •  Views: 782  •  Rate: 5 (1 votes)  •  Jul 05 2005 - 16:48

Role-based Security with Forms Authentication


Provides insight and tips on using role-based (groups) Forms Authentication in ASP.NET, which has only partial support for roles.


Details  •  Read Tutorial  •  Views: 846  •  Rate: 0 (0 votes)  •  Sep 10 2004 - 20:16

Cookieless ASP.NET forms authentication


They say it is not possible to use cookieless forms authentication in .NET. Well it is, and relatively easy to accomplish!


Details  •  Read Tutorial  •  Views: 1081  •  Rate: 0 (0 votes)  •  Sep 10 2004 - 20:16

Securing image URLs in a website


How to hide image URLs on a website to avoid illegal access, using a custom HttpHandler and encryption.


Details  •  Read Tutorial  •  Views: 841  •  Rate: 0 (0 votes)  •  Sep 10 2004 - 20:15

A Windows logon, web user control implementation


A classic example of implementing reusable web user control, with supporting controls and classes to keep the code manageable.


Details  •  Read Tutorial  •  Views: 799  •  Rate: 0 (0 votes)  •  Sep 10 2004 - 20:13