Building Secure Microsoft ASP.NET Applications
Résumé
Building secure distributed Web applications can be challenging. It usually involves integrating several different technologies and products-yet your complete application will only be as secure as its weakest link. This guide presents a practical, scenario-driven approach to designing and building secure ASP.NET applications for Microsoft Windows 2000 and version 1.1 of the Microsoft .NET Framework. It focuses on the key elements of authentication, authorization, and secure communication within and across the tiers of distributed .NET Web applications.
This guide focuses on:- Authentication (to identify the clients of your application)
- Authorization (to provide access controls for those clients)
- Secure communication (to ensure that messages remain private and are not altered by unauthorized parties)
Patterns & practices contain specific recommendations Illustrating how to design, build, deploy, and operate architecturally sound solutions to challenging business and technical scenarios. The technical guidance is reviewed and approved by Microsoft engineering teams, consultants, and and customers.
Patterns & practices- Practical-Based on field experience
- Authoritative-Offer the best advice available
- Accurate-Technically validated and tested
- Actionable-Provide the steps to success
- Relevant-Address real-world problems
Contents
- Introduction
- Security Model for ASP.NET Applications
- Authentication and Authorization Design
- Secure Communication
- Intranet Security
- Extranet Security
- Internet Security
- ASP.NET Security
- Enterprise Services Security
- Web Services Security
- .NET Remoting Security
- Data Access Security
- Troubleshooting Security Issues
- How To: Create a Custom Account to Run ASP.NET
- How To: Use Forms Authentication with Active Directory
- How To: Use Forms Authentication with SQL Server 2000
- How To: Create GenericPrincipal Objects with Forms Authentication
- How To: Implement Kerberos Delegation for Windows 2000
- How To: Implement IPrincipal
- How To: Create a DPAPI Library
- How To: Use DPAPI (Machine Store) from ASP.NET
- How To: Use DPAPI (User Store) from ASP.NET with Enterprise Services
- How To: Create an Encryption Library
- How To: Store an Encrypted Connection String in the Registry
- How To: Use Role-based Security with Enterprise Services
- How To: Call a Web Service Using Client Certificates from ASP.NET
- How To: Call a Web Service Using SSL
- How To: Host a Remote Object in a Windows Service
- How TO : Set Up SSL on a Web Server
- How To: Set Up Client Certificates
- How To: Use IPSec to Provide Secure Communication Between Two Servers
- How To: Use SSL to Secure Communication with SQL Server 2000
Base Configuration
Configuration Stores and Tools
Reference Hub
How Does It Work?
ASP.NET Identity Matrix
Cryptography and Certificates
.NET Web Application Security
L'auteur - Microsoft Corporation
The Microsoft Windows Server 2003 team designs, builds, tests, documents and supports Microsoft Windows server products and solutions.
Caractéristiques techniques
| PAPIER | |
| Éditeur(s) | Microsoft Press |
| Auteur(s) | Microsoft Corporation |
| Parution | 27/02/2003 |
| Nb. de pages | 616 |
| Format | 18,7 x 22,7 |
| Couverture | Broché |
| Poids | 1180g |
| Intérieur | Noir et Blanc |
| EAN13 | 9780735618909 |
| ISBN13 | 978-0-7356-1890-9 |
Avantages Eyrolles.com
Consultez aussi
- Les meilleures ventes en Graphisme & Photo
- Les meilleures ventes en Informatique
- Les meilleures ventes en Construction
- Les meilleures ventes en Entreprise & Droit
- Les meilleures ventes en Sciences
- Les meilleures ventes en Littérature
- Les meilleures ventes en Arts & Loisirs
- Les meilleures ventes en Vie pratique
- Les meilleures ventes en Voyage et Tourisme
- Les meilleures ventes en BD et Jeunesse
- Informatique Développement d'applications Programmation .NET
- Informatique Développement d'applications Programmation .NET ADO.NET
- Informatique Développement d'applications Programmation .NET ASP.NET
- Informatique Développement d'applications Conception et développement web
- Informatique Développement d'applications Conception et développement web Serveurs web et serveurs d'application IIS
- Informatique Développement d'applications Langages ASP.NET
