security considertations in deploying asp.net web apps

[Andy Fish]

Hi,

I am about to deploy an asp.net web app which will consist of a web server
in the DMZ invoking web services hosted inside the corporate firewall. Both
will be hosted on IIS 5 or 6 using windows 2000 or 2003 server

I am well versed in the general security considerations for this type of
architecture but I was wondering if there are any good books or papers with
guidelines specifically for asp.net.

I'm interested in any specific configuration options or relevant APIs
relating to things like preventing DOS attacks, parameter validation,
reverse proxying of SOAP messages etc etc

Andy

 

[Eliyahu Goldin]

http://www.microsoft.com/downloads/...FamilyID=055FF772-97FE-41B8-A58C-BF9C6593F25E

Eliyahu