Résumé
With the spread of web-enabled desktop clients and web-server based applications, developers can no longer afford to treat security as an afterthought. It's one topic, in fact, that .NET forces you to address, since Microsoft has placed security-related features at the core of the .NET Framework. Yet, because a developer's carelessness or lack of experience can still allow a program to be used in an unintended way, Programming .NET Security shows you how the various tools will help you write secure applications.
The book works as both a comprehensive tutorial and reference to security issues for .NET application development, and contains numerous practical examples in both the C# and VB.NET languages. With Programming .NET Security, you will learn to apply sound security principles to your application designs, and to understand the concepts of identity, authentication and authorization and how they apply to .NET security. This guide also teaches you to:
- use the .NET run-time security features and .NET security namespaces and types to implement best-practices in your applications, including evidence, permissions, code identity and security policy, and role based and Code Access Security (CAS) use the .NET cryptographic APIs , from hashing and common encryption algorithms to digital signatures and cryptographic keys, to protect your data.
- use COM+ component services in a secure manner
If you program with ASP.NET will also learn how to apply security to your applications. And the book also shows you how to use the Windows Event Log Service to audit Windows security violations that may be a threat to your solution.
Authors Adam Freeman and Allen Jones, early .NET adopters and long-time proponents of an "end-to-end" security model, based this book on their years of experience in applying security policies and developing products for NASDAQ, Sun Microsystems, Netscape, Microsoft, and others. With the .NET platform placing security at center stage, the better informed you are, the more secure your project will be.
Contents include:
- Programming, system administration, networking, and user commands with complete lists of options
- GRUB, LILO, and Loadlin bootloaders
- Shell syntax and variables for the bash, csh, and tcsh shells
- Pattern matching
- Emacs, vi, and vim editing commands
- sed and gawk commands
- The GNOME and KDE desktops and the fvwm2 window manager
- Red Hat and Debian package managers
Contents
- Fundamentals
- Security Fundamentals
- Assemblies
- Application Domains
- The Lifetime of a Secure Application
- .NET Security
- Introduction to Runtime Security
- Evidence and Code Identity
- Permissions
- Security Policy
- Administering Code-Access Security
- Role-Based Security
- Isolated Storage
- .NET Cryptography
- Introduction to Cryptography
- Hashing Algorithms
- Symmetric Encryption
- Asymmetric Encryption
- Digital Signatures
- Cryptographic Keys
- .NET Application Frameworks
- ASP.NET Application Security
- COM+ Security
- The Event Log Service
- API Quick Reference
- How to Use This Quick Reference
- Converting from C# to VB Syntax
- The System.Security Namespace
- The System.Security.Cryptography Namespace
- The System.Security.Cryptography.X509Certificates Namespace
- The System.Security.Cryptography.Xml Namespace
- The System.Security.Permissions Namespace
- The System.Security.Policy Namespace
- The System.Security.Principal Namespace
- Index
L'auteur - Adam Freeman
Adam Freeman has been developing in Java since before its general availability and has contributed to successful Java books and course materials, including Addison Wesley's Programming the Internet with Java. He has developed many of the largest, most complex, and most innovative Java projects in the world. His recent experience architecting a proprietary J2EE implementation for an e-commerce platform has given him an in-depth understanding of the current technologies and challenges facing those developing large scale distributed e-commerce systems. Adam has previously worked for Netscape, Sun Microsystems, and the NASDAQ stock exchange.
L'auteur - Allen Jones
Allen Jones has spent his career working for large corporate and financial institutions, successfully developing and implementing solutions based on the Microsoft enterprise product range. Allen has been developing Microsoft Windows® solutions since 1990 and working with Microsoft Windows NT® and Win32® since 1993. He was one of the first MCSEs to qualify anywhere in the world. Allen started programming in Java three years ago, and has since been developing e-commerce and security systems. Allen is a former employee of Microsoft in both Australia and the United Kingdom.
Caractéristiques techniques
| PAPIER | |
| Éditeur(s) | O'Reilly |
| Auteur(s) | Adam Freeman, Allen Jones |
| Parution | 01/08/2003 |
| Nb. de pages | 712 |
| Format | 17,7 x 23,3 |
| Couverture | Broché |
| Poids | 1015g |
| Intérieur | Noir et Blanc |
| EAN13 | 9780596004422 |
| ISBN13 | 978-0-596-00442-2 |
Avantages Eyrolles.com
Consultez aussi
- Les meilleures ventes en Graphisme & Photo
- Les meilleures ventes en Informatique
- Les meilleures ventes en Construction
- Les meilleures ventes en Entreprise & Droit
- Les meilleures ventes en Sciences
- Les meilleures ventes en Littérature
- Les meilleures ventes en Arts & Loisirs
- Les meilleures ventes en Vie pratique
- Les meilleures ventes en Voyage et Tourisme
- Les meilleures ventes en BD et Jeunesse
