OWASP Top 10 for .NET developers part 3: Broken authentication

This posts looks at the objectives of the OWASP Top 10 definition of broken authentication and session management and how it applies to .NET developers. It looks at attack vectors, coding mitigation and tools available within the Microsoft product suite.