How can I protect and test security of a WCF service?

Question

Hi

how can I protect my WCF service and how can I test its security?

For example, I do not want to allow people who knows the WCF service url to invoke it and pass parameters to get database information.

Later, should I create a C# console program to invoke this WCF service in order to test if an invalid visitor really can't access database information?

Answer 1

This is a good place to start WCF Security Guide