Testing ASP.NET Application from Attack

Question

I am building a Web Application in ASP.NET 4.0, using VS 2010 Professional.

I have tested the application against Sql injection, and user input.

Is there any other test necessary for me to do? Which tools should I use against external attack?

Answer 1

I suggest you take a look at the OWASP (Open Web Application Security Project) website - start with their top 10.

Troy Hunt wrote a good blog series about the top 10 and how to mitigate against them and released it as a free ebook.