J.D. Meier, Alex Mackman, Blaine Wastell, Prashant Bansode, Andy Wigley, Kishore Gopalan

Microsoft Corporation

September 2005

Summary

This page provides an index of patterns & practices Security Checklists organized by categories using multiple views.

Contents

.NET Framework Version 1.1
.NET Framework Version 2.0

.NET Framework Version 1.1

Architecture and Design Review Checklists

• Security Checklist: Architecture and Design Review

Code Review Checklists

• Security Checklist: .NET Framework 1.1
• Security Checklist: ADO.NET 1.1
• Security Checklist: ASP.NET 1.1
• Security Checklist: Enterprise Services (.NET Framework 1.1)
• Security Checklist: Remoting (.NET Framework 1.1)
• Security Checklist: Web Services (.NET Framework 1.1)

Deployment Review Checklists

• Security Checklist: Network Security
• Security Checklist: IIS 5.0
• Security Checklist: SQL Server 2000

.NET Framework Version 2.0

Code Review Checklists

• Security Checklist: .NET Framework 2.0
• Security Checklist: ADO.NET 2.0
• Security Checklist: ASP.NET 2.0

Feedback

Provide feedback by using either a Wiki or e-mail:

• Wiki. Security guidance feedback page at
  http://channel9.msdn.com/wiki/securityguidancefeedback/
• E-mail. Send e-mail to secguide@microsoft.com.

We are particularly interested in feedback regarding the following:

• Technical issues specific to recommendations
• Usefulness and usability issues

Technical Support

Technical support for the Microsoft products and technologies referenced in this guidance is provided by Microsoft Support Services. For product support information, see the Microsoft Support Web site at http://support.microsoft.com.

Community and Newsgroups

Community support is provided in the forums and newsgroups:

• MSDN Newsgroups: http://msdn.microsoft.com/newsgroups/default.asp
• ASP.NET Forums: http://forums.asp.net

To get the most benefit, find the newsgroup that corresponds to your technology or problem. For example, if you have a problem with ASP.NET security features, you would use the ASP.NET Security forum.

Test, Edit, and Release Team

• Test team: Larry Brader, Microsoft Corporation; Nadupalli Venkata Surya Sateesh, Sivanthapatham Shanmugasundaram, Infosys Technologies Ltd.
• Edit team: Nelly Delgado, Microsoft Corporation; Tina Burden McGrayne, TinaTech Inc.
• Release Management: Sanjeev Garg, Microsoft Corporation