Programming .NET Security: Writing Secure Applications Using C# or Visual Basic .NET

by Adam Freeman, Allen Jones

Overview

With the spread of web-enabled desktop clients and web-server based applications, developers can no longer afford to treat security as an afterthought. It's one topic, in fact, that .NET forces you to address, since Microsoft has placed security-related features at the core of the .NET Framework. Yet, because a developer's carelessness or lack of experience can still allow a program to be used in an unintended way, Programming .NET Security shows you how the various tools will help you write secure applications.The book works as both a comprehensive tutorial and reference to security issues for .NET application development, and contains numerous practical examples in both the C# and VB.NET languages. With Programming .NET Security, you will learn to apply sound security principles to your application designs, and to understand the concepts of identity, authentication and authorization and how they apply to .NET security. This guide also teaches you to:

• use the .NET run-time security features and .NET security namespaces and types to implement best-practices in your applications, including evidence, permissions, code identity and security policy, and role based and Code Access Security (CAS) use the .NET cryptographic APIs , from hashing and common encryption algorithms to digital signatures and cryptographic keys, to protect your data.
• use COM+ component services in a secure manner

If you program with ASP.NET will also learn how to apply security to your applications. And the book also shows you how to use the Windows Event Log Service to audit Windows security violations that may be a threat to your solution.Authors Adam Freeman and Allen Jones, early .NET adopters and long-time proponents of an "end-to-end" security model, based this book on their years of experience in applying security policies and developing products for NASDAQ, Sun Microsystems, Netscape, Microsoft, and others. With the .NET platform placing security at center stage, the better informed you are, the more secure your project will be.

Product Details

ISBN-13:	9780596552275
Publisher:	O'Reilly Media, Incorporated
Publication date:	06/27/2003
Sold by:	Barnes & Noble
Format:	eBook
Pages:	718
File size:	6 MB

About the Author

Adam Freeman is a professional programmer and the author of two early Java books, Programming the Internet with Java and Active Java, both published by Addison Wesley, as well as Java course materials. His recent experience architecting a green-field e-commerce platform has given him an in-depth understanding of the current security challenges facing those developing large scale distributed systems. Adam has previously worked for Netscape, Sun Microsystems and the NASDAQ stock exchange.

Allen Jones has been developing Windows® solutions since 1990 and working with Windows NT and Win32 since 1993. He was one of the first MCSEs to qualify anywhere in the world. For the last 3 years, Allen has been developing e-commerce and security systems for large corporations and financial institutions. He is a former employee of Microsoft® in both Australia and the UK and co-author, with Adam Freeman, of C# for Java Developers and .NET XML Web Services Step by Step , both from Microsoft Press®.

Table of Contents

• Dedication
• Preface
• Part I: Fundamentals
  • Chapter 1: Security Fundamentals
  • Chapter 2: Assemblies
  • Chapter 3: Application Domains
  • Chapter 4: The Lifetime of a Secure Application
• Part II: .NET Security
  • Chapter 5: Introduction to Runtime Security
  • Chapter 6: Evidence and Code Identity
  • Chapter 7: Permissions
  • Chapter 8: Security Policy
  • Chapter 9: Administering Code-Access Security
  • Chapter 10: Role-Based Security
  • Chapter 11: Isolated Storage
• Part III: .NET Cryptography
  • Chapter 12: Introduction to Cryptography
  • Chapter 13: Hashing Algorithms
  • Chapter 14: Symmetric Encryption
  • Chapter 15: Asymmetric Encryption
  • Chapter 16: Digital Signatures
  • Chapter 17: Cryptographic Keys
• Part IV: .NET Application Frameworks
  • Chapter 18: ASP.NET Application Security
  • Chapter 19: COM+ Security
  • Chapter 20: The Event Log Service
• Part V: API Quick Reference
  • Chapter 21: How to Use This Quick Reference
  • Chapter 22: Converting from C# to VB Syntax
  • Chapter 23: The System.Security Namespace
  • Chapter 24: The System.Security.Cryptography Namespace
  • Chapter 25: The System.Security.Cryptography.X509Certificates Namespace
  • Chapter 26: The System.Security.Cryptography.Xml Namespace
  • Chapter 27: The System.Security.Permissions Namespace
  • Chapter 28: The System.Security.Policy Namespace
  • Chapter 29: The System.Security.Principal Namespace
• Colophon