OWASP Top 10 for .NET developers part 6: Security Misconfiguration
This is a good read for understanding security in .NET.