Programming Microsoft® ASP.NET 2.0 Core Reference, 2nd Edition

Chapter 15. ASP.NET Security

In this chapter:
Where the Threats Come From
The ASP.NET Security Context
Using Forms Authentication
The Membership and Role Management API
Security-Related Controls
Conclusion

Many developers have learned on their own that security is not a feature that can be added to existing applications or introduced late in the development stage. Security is inherently tied to the functions of an application and should be planned as one of the first features, very early at the design level.

By nature, Web applications are subject to several types of attacks whose damage and impact can vary quite a bit, depending on the characteristics of the application itself. The most secure Web application is the application that actually resists ...