Defensive programming against malicious attacks

Question

The company I'm working on is rebuilding the internal product for external use.

The product will initially be created in C # using WPF, and then ported to Silverlight.

One of the focus points is encoding against malicious attacks, for example. SQL injection, etc.

Questions:

• Can anyone recommend urls pointing to articles on best security practices.
• Can anyone recommend an analysis tool for code analysis to identify weaknesses. If possible, we would like to include this tool in our continuous integration scenarios.

Answer 1

MSDN: ( #).

Answer 2

, , :

http://www.owasp.org/index.php/Main_Page

:

http://www.owasp.org/index.php/Top_10_2007

-10 -, . , , .

, .

* *

MSDN, #.

http://msdn.microsoft.com/en-us/library/ms998408.aspx

Answer 3

, :

: .

, .

, - OWASP Top 10 (google: owasp top 10 2007).

, , . , , .

,

, , , .

:

• " " (google: david rok)
• OWASP 10 ( - Top 10)

,

, " " , . , #. MSDN (http://msdn.microsoft.com/en-us/library/ms998408.aspx).

, : , , ( Google , " " " " ) , .

, .

SB

PS: sorry for the links "google", I am a new user and can leave only 1 url in my answers :(