Today I attended a live webcast on DotNetNuke hosted by Stan Schultes and Russ Fustino and the topic of security in the DNN framework came up. I originally was going to post a article on the subject of how to encrypt a connection string in ASP.Net when I came across this resource guide. This lists a series of how to guides on the best practices for both .Net versions. If you have not already done so, you should check it out here.
It can be found here:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/securityhowtosindex.asp
This should answer any question you may have regarding the following subjects:
- Authentication and Authorization
- Code Access Security
- Code Review
- Communication Security
- Configuration
- Cryptography
- Deployment Review
- Impersonation and Delegation
- Input and Data Validation
- Patching and Upgrading
- SQL Server 2000
- Threat Modeling
- Web Services
- Etc.
Hopes this helps someone out there who may stumble across my blog looking for information on these subjects. Eventually I hope to write an article about each of these particular areas when I have the time to do so.