I have quite a few questions concerning things like

login controls
validation (especially custom validators)
account management 

So I was wondering if anyone could point me towards a good tutorial that could cover some (if not all) of these things...


I tried Google but couldn't find what I was looking for, hoping someone knows of some good sites I've yet to visit.

This is a big topic about ASP.NET Security, here are some useful articles on MSDN:
ASP.NET Security Architecture
ASP.NET Login Controls Overview
Microsoft ASP.NET 2.0 Member/Role Management with IIS, Part 1: Security and Configuration Overview

And this tutorial is helpful for learning .NET2.0 Security features:
Examining ASP.NET 2.0's Membership, Roles, and Profile

I am not sure what your requirements are. Are you talking about the general security practices or ASP.NET based technical information?

 Well I can guide you through the general security concepts related to Login, Authentication etc.

 

1) Create the username and password.

2) Send the username and password to the user in two seperate emails.

3) Make the password random enough for self-change, initial and reset password functions (one- cap, one-number, one-lowercase, 7 characters mimimum etc)

4) Never send the old password to the user. Generate the new one.

5) During password change, ask for current password, new password, re-type new password.

6) Perform all the validations on server side. Dont rely on javascript client side validation.

7) Never retrieve passwords from the server.

8) Store the passwords in the database in a ecrypted or hashed format.

9) Always Salt the password during hashing or encryption.

 I would recommend http://www.owasp.org and Sans

Thanks

Find more info at Web Information Security 

 

Hi, i am interested in using sitemap with custom login. (We are implementing login on our own like validating against DB table for user login/password etc).

 when i read about sitemap for role based menu and access, it asked for user role (IPrinciple object or so). I want able to figure  out how can i set that role etc so i left that idea and started using menu manually.

 

If you are aware of how to use sitemap,with custom authentication/role etc please do let me know.

 

Thanks in advance

 

These security links might help you:   

http://del.icio.us/ventstation.com/security

Rgds

Accelerator