How to make sure that my public site which is built on SharePoint 2010 is secure ?
- Is there any tool is available who check site vulnerabilities ? Any test cases or methods to check the site security?
Thanks in advance!
I mean, the best way to test for everything is to do unit testing, and test every possible combination of possible vulnerabilities you can think of. You can either script this, or do it manually.
The best approach would probably be to create users, each with a unique permission level, and try to access sites or pages that they shouldn't. If they can, then that's a vulnerability.
Another one to look out for is query strings in the URL. If you have a page with list items, and you only want people to access their own items, for example, make sure they can't just connect to the page directly.
There are hundreds of possible ways to attack a site, more than I can fit in this answer, you just have to think of every possible flaw, and attempt it on your site.
If you are looking for various tools to do it for you, however, Here is a link that should help you as well.
Couple of things to make sure: