Security for Microsoft® Visual Basic® .NET

Securing Web Applications in the Real World

The perception by users that your Web site is secure is almost as important as actually securing it. Here are some basic principles for securing Web sites:

• Use SSL and https for all sensitive data that users submit.

• Allow users to browse your site anonymously, and require users to log in with a password before making a purchase or displaying any personal information. This helps prevent someone who has unauthorized access to a user’s machine from accessing private information stored in your system.

• Handle credit card and payment information sensitively. Ask users for permission before storing credit card information for return visits. If your site confirms credit card information, it might be sufficient ...