I have to develop an ASP.NET web application and publish it in Windows Azure so that it runs there under IIS7. I don’t have any serious experience developing such applications. I constantly hear that “site X was broken into because it was doing Y in a very stupid way”. I’m kind of paranoid that I might also be doing Y (and also Z) in a very stupid way and have my application hacked in no time.
Is there a good guideline of making well protected ASP.NET web sites?
Take a look at the OWASP site and set of guidelines. They are rather extensive.
They have several tools that will detect some types of vulnerabilites.