Securing ASP.NET Applications
Introduction
.NET environment is attractive to developers because it is a language-neutral environment that can deliver content to end-users regardless of the platform in use.
.NET applications and services can provide potential intruders with a new vector of attack, since many firewalls do not process HTTP traffic at a sufficient level to recognize malicious activity
http://www.aiapir.com/index.php?option=com_content&task=view&id=47&Itemid=90