.NET Security for Architects

OWASP .NET Quick Reference
OWASP Code Review Project OWASP Testing Guide

.NET Security for Architects

Security concerns must be addressed at the architectural level. This section is to provide tools and guidance for the .NET architect.

Areas of Concern

• .NET Application Lifecycle

• Conceptual Architectures for .NET Web Applications and Services

• Identity and Trust Architectural Concerns in .NET

• Security Requirements & Threat Modeling

• Design Review and Checklists

• Separating Roles - Build Systems and Software Promotion

• Data Loss Prevention Concerns

Articles & Projects

ASP.NET Security Architecture

Security Engineering

Solutions to SOA Security

Web Service Specifications

Security Guidance for Windows Communication Foundation

References

International Association of Software Architects

Patterns and Practices

Patterns and Practices Security Wiki

Microsoft Security Development Lifecycle 3.2

Tools

Microsoft Threat Analysis & Modeling v2.1.2