Improving Web Application Security: Threats and - CGISecurity

19Securing Your ASP.NET Applicationand Web ServicesIn This Chapter●●●●●●●●●●●OverviewLocking down an ASP.NET applicationASP.NET process identity security considerationsUsing Aspnet_setreg.exe to encrypt account credentials in configuration filesEnforcing machine-wide and Web application security policyAccessing resources securely from ASP.NETSecuring a Web service configurationSecuring a Forms authentication configurationSecuring ASP.NET session state and view stateSecuring a Web farmA reference table that illustrates a secure ASP.NET applicationAttributes of a secure ASP.NET applicationSecure ASP.NET Web applications rely on a fully secured network, host, and platforminfrastructure. When trust boundaries are set at each level to block the intruder, theattacker will attempt to exploit vulnerabilities in Web applications and Web servicesthat are listening on port 80. If the Web application is configured defectively, attackerscan gain access and exploit the system. As an administrator, you should review thedefault machine-level configuration and the individual application configurations toaddress and remove any vulnerable and insecure settings.