How to provide security in .net web service.?

Question

hi friends, i am developing a web service(asmx) for an mobile app. that app is about mobile banking....so i can i provide a best security to my service..how i can secure my service...and which encryption algorithms will be good for web service.. please lead me..i will be thank full for this.. Thanks....

Mukesh Kumar Tiwari · Answer

hi Blackbarbie first of all thanks for reply, Senario is this, when we will send the detail of debit card, and credit on server, then it may that some threats make effects on the card info. or may be steal. thats why i am little bit confused that what i should doe for this..bcz project is for USA, and thats the client req. I have read the link, which you have send... So please suggest me if you have some best idea... Thnaks....

Blackbarbie Bb · Answer

The first thing why you have been worried about securing your service? as per the above stuff ,you were used to trigger some notification or internally you might refresh the data [correct me if i m wrong] if you think there might be attacks ,derive your threat model first,how and what were the approaches the attacker can decrypt your service,does your service sending data in some parameters? AFAIK the MITM [man in the middle attack] would be suitable while testing for web application security,since the web services have been running at your local machine/server attacker cant grab your service at ease if you were more interested in securing your services follow this guide : http://www.techrepublic.com/article/practical-examples-for-establishing-web-service-security-in-net/ hope it helps