You can provide security for your application through cross-site scripting protection, session state protection, authentication, and authorization.
Topics:
About Cross-Site Scripting Protection
Understanding Session State Protection
Establishing User Identity Through Authentication
Providing Security Through Authorization