Programming .NET Security

With the spread of web-enabled desktop clients and web-server based applications, developers can no longer afford to treat security as an afterthought. It's one topic, in fact, that .NET forces you to address, since Microsoft has placed security-related features at the core of the .NET Framework. Yet, because a developer's carelessness or lack of experience can still allow a program to be used in an unintended way, Programming .NET Security shows you how the various tools will help you write secure applications.

Table of Contents

Preface 


Part I. Fundamentals

1. Security Fundamentals

2. Assemblies

3. Application Domains

4. The Lifetime of a Secure Application

  
Part II. .NET Security

5. Introduction to Runtime Security

6. Evidence and Code Identity

7. Permissions
8. Security Policy

9. Administering Code-Access Security

10. Role-Based Security

11. Isolated Storage

   
Part III. .NET Cryptography

12. Introduction to Cryptography

13. Hashing Algorithms
14. Symmetric Encryption
15. Asymmetric Encryption
16. Digital Signatures
17. Cryptographic Keys

 
Part IV. .NET Application Frameworks

18. ASP.NET Application Security
19. COM+ Security

20. The Event Log Service

Part V. API Quick Reference

21. How to Use This Quick Reference

22. Converting from C# to VB Syntax
23. The System.Security Namespace

24. The System.Security.Cryptography Namespace

25. The System.Security.Cryptography.X509Certificates Namespace

26. The System.Security.Cryptography.Xml Namespace

27. The System.Security.Permissions Namespace

28. The System.Security.Policy Namespace

29. The System.Security.Principal Namespace


Index