Whar are the best way to improve security of application?

Question

Hello All

I am using MVC and Nhibernate in my application. How can i improve security of my application using proper authentication and authorization?

Right now i am using asp.net mvc authentication.

Answer 1

I would suggest you to scan your site for vulnerabilities using some of these great solutions.

Personally, i find this extremely useful.

Answer 2

The question is frankly too open. "Proper" authentication and authorization depends on what your application is doing and the data it accepts, stores and outputs. For example twitter's authentication strategy is very different to that of your bank's on-line banking service.

There's also more to it than authentication and authorization, there's XSS, CSRF, Cryptography, Information Leaks and more. Start with the OWASP Top 10 and go from there. However this will not show you the code, because you can't be generic about this, it always needs tailored to the application being secured.