Security issues in the Windows environment have recently attracted considerable publicity. Many companies including Microsoft, have embarked upon ambitious initiatives to remove security flaws from their programs. Moving to a Web-based environment requires new ways of thinking about security as well as a complete understanding of the security underpinnings of .NET. This powerful Web platform is expected to lead the way to a world of devices interconnected by services. That means that a company utilizing .NET can dramatically improve the performance of its daily operations by enabling access to information anywhere and at any time.

But moving to this interconnected environment requires new and innovative ways to secure that information.

• Provides critical details and guidance from an experienced trainer.
• Includes tech reviews and guidance from key Microsoft developers.
• Authoritative and useful, covering security principles and security under Windows in a Web-based environment.
• Offers the first thorough exploration of security nameplates under the .NET framework.
• Companion Web site includes code examples from the text, in VB.NET and in C#.

Written by a Microsoft internal trainer, and reviewed by Michael Dunner, a security expert at Microsoft Corporation, this book uncovers all of the techniques that you'll need to know in order to create secure applications running under .NET. Marshall first explains the security underpinnings of .NET and then:

Contents

• Introduction
• .NET Architecture
• .NET Security Core Concepts
• Runtime Security Policy
• Code Access Security
• Role-Based Security
• ASP.NET Security
• Cryptography
• Customizing .NET Security
• System.Security Namespace
• System.Security.Permissions Namespace
• Index