Securing .NET application and data

.NET Data Access Architecture Guide

Lock Down IIS and SQL Server

Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication

Planning for Extranet or Internet Deployment

Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication