Question

I am going to start new web application (ASP .Net), but i am wondering how many type of attacks are possible on web applications which we need to take care of while building a web application.

As i am developing this web application from scratch, if i can get this kind of list and identify what i need to take care of while building the application it will be a great help.

Answer 1

XSS attacks

Cross-site scripting (XSS) is a type
of computer security vulnerability
typically found in web applications
which allow code injection by
malicious web users into the web pages
viewed by other users.

Denial-of-service attack

A denial-of-service attack (DoS
attack) or distributed
denial-of-service attack (DDoS attack)
is an attempt to make a computer
resource unavailable to its intended
users.

SQL injection

SQL injection is a code injection
technique that exploits a security
vulnerability occurring in the
database layer of an application.

Also read

Five common Web application vulnerabilities

and a similar SO question

Common Website Attack Methods, Detection, and Recovery