Question

I am currently working on an ASP.NET 3.5 and C# web application which deals with users private information like SSN numbers. What are some of the security measures which I need to take from an application development stand point to feel safe?

Answer 1

To secure your application you will need to understand the threats it will face and then develop appropriate mitigation techniques. A good place to start would be by creating a threat model.

Have a look at some of these resources:

• How To: Create a Threat Model for a Web Application at Design Time
• Web Application Exploits and Defenses
• Web Security: Are You Part Of The Problem?
• OWASP