OWASP .NET Recommended Resources - Revision history

Gtorok: Added Resources

2018-05-11T12:39:18Z

Added Resources

2014-05-08T16:00:58Z

2014-05-08T15:59:33Z

2014-05-08T15:44:17Z

2014-05-08T15:38:39Z

2014-05-08T15:36:52Z

2014-05-08T15:32:01Z

2013-11-05T21:48:14Z

2011-12-04T21:27:32Z

Added a reference to Troy Hunt's OWASP Top 10 for .NET developers series.

2009-05-07T20:08:38Z

‎OWASP

@@ Line 27: / Line 27: @@
 [http://www.troyhunt.com/ Troy Hunt's Blog]
 ===Advisories, Articles & Projects===
@@ Line 51: / Line 53: @@
 [http://www.microsoft.com/technet/security/advisory/954462.mspx Microsoft Security Advisory (954462) (SQL Injection Advisory)]
 ===Online References, Training===
@@ Line 65: / Line 69: @@
 [http://www.teammentor.net/teamMentor TeamMentor]
 ===Books and Publications===
@@ Line 91: / Line 97: @@
 [http://support.microsoft.com/kb/954476 MS Source Code Analyser for SQL Injection]

@@ Line 10: / Line 10: @@
 ==OWASP .NET Recommended Resources==
+This is a canonical list of outside resources for .NET developers seeking security information.
 ===Blogs & People===
 [http://securitybuddha.com/ Mark Curphrey's Blog]

@@ Line 95: / Line 95: @@
 ===Tools===
-[http://www.microsoft.com/downloads/details.aspx?familyid=59888078-9daf-4e96-b7d1-944703479451&displaylang=en Microsoft Threat Analysis & Modeling v2.1.2]
+[http://blogs.msdn.com/b/sdl/archive/2014/04/15/introducing-microsoft-threat-modeling-tool-2014.aspx Microsoft Threat Modeling Tool 2014]
 [http://msdn.microsoft.com/en-us/security/aa973814.aspx Anti-Cross Site Scripting]
@@ Line 106: / Line 102: @@
 [http://support.microsoft.com/kb/954476 Microsoft Source Code Analyzer]
 [http://support.microsoft.com/kb/954476 MS Source Code Analyser for SQL Injection]

← Older revision		Revision as of 15:44, 8 May 2014
Line 76:		Line 76:

	[http://www.troyhunt.com/2010/05/owasp-top-10-for-net-developers-part-1.html OWASP Top 10 for .NET developers - Troy Hunt]		[http://www.troyhunt.com/2010/05/owasp-top-10-for-net-developers-part-1.html OWASP Top 10 for .NET developers - Troy Hunt]
		+
		+	[http://www.teammentor.net/teamMentor TeamMentor]

	===Books and Publications===		===Books and Publications===

@@ Line 68: / Line 68: @@
 [http://msdn2.microsoft.com/en-us/practices/default.aspx Patterns and Practices]
 [http://msdn.microsoft.com/en-us/security/default.aspx MSDN Security Developer Center]
@@ Line 75: / Line 73: @@
 [http://blogs.technet.com/feliciano_intini/pages/microsoft-blogs-and-web-resources-about-security.aspx Microsoft Security Resources]
-[http://www.pluralsight.com/main/olt/Module.aspx?a=keith-brown&n=aspdotnet-security&cn=aspdotnet-fundamentals ASP.NET Security Webcasts - Kieth Brown]
+[http://pluralsight.com/training/Courses#security Pluralsight Security Course Catalog]
 [http://www.troyhunt.com/2010/05/owasp-top-10-for-net-developers-part-1.html OWASP Top 10 for .NET developers - Troy Hunt]

@@ Line 43: / Line 43: @@
 ===Advisories, Articles & Projects===
-[http://msdn.microsoft.com/en-us/library/ms978357.aspx Security and Operational Guidance for .NET Applications]
+[http://msdn.microsoft.com/en-us/library/ee658105.aspx Security and Operational Guidance for .NET Applications]
 [http://msdn2.microsoft.com/en-us/library/yedba920.aspx ASP.NET Security Architecture]
@@ Line 53: / Line 53: @@
 [http://msdn.microsoft.com/en-us/library/ms954725.aspx patterns & practices Security Guidance for .NET Framework 2.0]
-[http://msdn.microsoft.com/en-us/library/ms978378.aspx Authentication in ASP.NET: .NET Security Guidance]
+[http://msdn.microsoft.com/en-us/library/Ee817643(pandp.10).aspx Authentication in ASP.NET: .NET Security Guidance]
 [http://msdn2.microsoft.com/en-us/library/ms998404.aspx Security Engineering]
@@ Line 61: / Line 61: @@
 [http://en.wikipedia.org/wiki/WS-%2A Web Service Specifications]
-[http://www.codeplex.com/WCFSecurity Security Guidance for Windows Communication Foundation]
+[http://wcfsecurityguide.codeplex.com/ Security Guidance for Windows Communication Foundation]
 [http://www.microsoft.com/technet/security/advisory/954462.mspx Microsoft Security Advisory (954462) (SQL Injection Advisory)]

@@ Line 31: / Line 31: @@
 [http://blogs.msdn.com/michael_howard/default.aspx Michael Howard's Blog]
-[http://blogs.msdn.com/jmeier/archive/tags/Security+Development/default.aspx J.D. Meier's Blog]
+[http://blogs.msdn.com/jmeier/archive/tags/Security/default.aspx J.D. Meier's Blog]
 [http://www.leastprivilege.com Dominick Baier's Blog]
@@ Line 38: / Line 38: @@
 [http://blogs.msdn.com/ace_team/ Microsoft's ACE Team]
 ===Advisories, Articles & Projects===

← Older revision		Revision as of 21:48, 5 November 2013
Line 88:		Line 88:

	[http://msdn.microsoft.com/en-gb/security/aa473878.aspx Developer Highway Code], Microsoft Corp, United Kingdom		[http://msdn.microsoft.com/en-gb/security/aa473878.aspx Developer Highway Code], Microsoft Corp, United Kingdom
		+
		+	[http://securitydriven.net/ Security Driven .NET], Stan Drapkin

	===Tools===		===Tools===

← Older revision		Revision as of 21:27, 4 December 2011
Line 74:		Line 74:

	[http://www.pluralsight.com/main/olt/Module.aspx?a=keith-brown&n=aspdotnet-security&cn=aspdotnet-fundamentals ASP.NET Security Webcasts - Kieth Brown]		[http://www.pluralsight.com/main/olt/Module.aspx?a=keith-brown&n=aspdotnet-security&cn=aspdotnet-fundamentals ASP.NET Security Webcasts - Kieth Brown]
		+
		+	[http://www.troyhunt.com/2010/05/owasp-top-10-for-net-developers-part-1.html OWASP Top 10 for .NET developers - Troy Hunt]

	===Books and Publications===		===Books and Publications===

@@ Line 24: / Line 24: @@
 ===== OWASP =====
-; [https://lists.owasp.org/pipermail/owasp-phoenix/2009-May/000079.html OWASP-Phoenix List Reply regarding GSSP .NET Cert] from [http://twitter.com/atdre Dre]
+[https://lists.owasp.org/pipermail/owasp-phoenix/2009-May/000079.html OWASP-Phoenix List Reply regarding GSSP .NET Cert] from [http://twitter.com/atdre Dre]
 ==== General ====