Building Secure ASP.NET Applications

图书介绍

• Author: Microsoft Corporation

This title presents a scenario-based approach to designing and building secure applications that are based on ASP.NET technology. It identifies exactly where and how developers should perform authentication and authorization, and it demonstrates both how and when to use security techniques in establishing communication within and across the tiers of distributed Microsoft .NET Web applications. Above all, it imparts best practices for predictable results-based on proven techniques and insights gleaned from Microsoft product teams and the experience of Microsoft customers.



CONTENTS



Preface

Chapter 1 - Introduction

Chapter 2 - Security Model for ASP.NET Applications

Chapter 3 - Authentication and Authorization Design

Chapter 4 - Secure Communication

Chapter 5 - Intranet Security

Chapter 6 - Extranet Security

Chapter 7 - Internet Security

Chapter 8 - ASP.NET Security

Chapter 9 - Enterprise Services Security

Chapter 10 - Web Services Security

Chapter 11 - .NET Remoting Security

Chapter 12 - Data Access Security

Chapter 13 - Troubleshooting Security Issues

Part 1 - Index of How Tos

How To - Create a Custom Account to Run ASP.NET

How To - Use Forms Authentication with Active Directory

How To - Use Forms Authentication with SQL Server 2000

How To - Create GenericPrincipal Objects with Forms Authentication

How To - Implement Kerberos Delegation for Windows 2000

How To - Implement IPrincipal

How To - Create a DPAPI Library

How To - Use DPAPI (Machine Store) from ASP.NET

How To - Use DPAPI (User Store) from ASP.NET with Enterprise Services

How To - Create an Encryption Library

How To - Store an Encrypted Connection String in the Registry

How To - Use Role-based Security with Enterprise Services

How To - Call a Web Service Using Client Certificates from ASP.NET

How To - Call a Web Service Using SSL

How To - Host a Remote Object in a Windows Service

How To - Set Up SSL on a Web Server

How To - Set Up Client Certificates

How To - Use IPSec to Provide Secure Communication Between Two Servers

How To - Use SSL to Secure Communication with SQL Server 2000

Base Configuration

Configuration Stores and Tools

Reference Hub

How Does It Work?

ASP.NET Identity Matrix

Cryptography and Certificates

.NET Web Application Security

Glossary

Index