Geodesic
Common Web Application Attack Types and Security Using ASP.NET
Computer Science and Information Systems, Tome 3 (2006) no. 2.

Voir la notice de l'article provenant de la source Computer Science and Information Systems website

Web applications security is one of the most daunting tasks today, because of security shift from lower levels of ISO OSI model to application level, and because of current situation in IT environment. ASP.NET offers powerful mechanisms to render these attacks futile, but it requires some knowledge of implementing Web application security. This paper focuses on attacks against Web applications, either to gain direct benefit by collecting private information or to disable target sites. It describes the two most common Web application attacks: SQL Injection and Cross Site Scripting, and is based on author’s perennial experience in Web application security. It explains how to use ASP.NET to provide Web applications security. There are some principles of strong Web application security which make up the part of defense mechanisms presented: executing with least privileged account, securing sensitive data (connection string) and proper exception handling (where the new approach is presented using ASP.NET mechanisms for centralized exception logging and presentation). These principles help raise the bar that attacker has to cross and consequently contribute to better security. 
@article{CSIS_2006_3_2_a5,
     author = {Bojan Jovi\v{c}i\'c and Dejan Simi\'c},
     title = {Common {Web} {Application} {Attack} {Types} and {Security} {Using} {ASP.NET}},
     journal = {Computer Science and Information Systems},
     publisher = {mathdoc},
     volume = {3},
     number = {2},
     year = {2006},
     url = {http://geodesic.mathdoc.fr/item/CSIS_2006_3_2_a5/}
}
TY  - JOUR
AU  - Bojan Jovičić
AU  - Dejan Simić
TI  - Common Web Application Attack Types and Security Using ASP.NET
JO  - Computer Science and Information Systems
PY  - 2006
VL  - 3
IS  - 2
PB  - mathdoc
UR  - http://geodesic.mathdoc.fr/item/CSIS_2006_3_2_a5/
ID  - CSIS_2006_3_2_a5
ER  - 
%0 Journal Article
%A Bojan Jovičić
%A Dejan Simić
%T Common Web Application Attack Types and Security Using ASP.NET
%J Computer Science and Information Systems
%D 2006
%V 3
%N 2
%I mathdoc
%U http://geodesic.mathdoc.fr/item/CSIS_2006_3_2_a5/
%F CSIS_2006_3_2_a5
Bojan Jovičić; Dejan Simić. Common Web Application Attack Types and Security Using ASP.NET. Computer Science and Information Systems, Tome 3 (2006) no. 2. http://geodesic.mathdoc.fr/item/CSIS_2006_3_2_a5/