RE: Web site security

["Harbar, Spencer J." <spencer.harbar () dns co uk>]

Check out
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/threatcounter.asp

This (downloadable) book has all the info you need.

Hth
.s 

-----Original Message-----
From: Bénoni MARTIN [mailto:Benoni.MARTIN () libertis ga] 
Sent: 11 May 2004 15:12
To: webappsec () securityfocus com
Subject: Web site security

Hi list!

Currently setting up a website in ASP, I am looking for some docs about secure programming. The questions I have are 
like:
- What do I have to check / avoid in my web pages to avoid vulnerabilities,
- How to store password hashes in my Data Base, and not clear-text passwords,
- What tools can be good to help me securing a web site (I was thinking about Nessus, Whisker, AppScan, WebInspect, 
maybe there are more than that and better)
- ...

The technologies I am using are IIS 6, SQL Server 2000 and Win2K3.

Thanks in advance for any clue, advice, ...!






---------------------------------------------------
This email from dns has been validated by dnsMSS Managed Email Security and is free from all known viruses.

For further information contact email-integrity () dns co uk