Building Secure ASP.NET Applications
From Mynoteswiki.com
[edit]
Summary
This guide presents a practical, scenario driven approach to designing and building secure ASP.NET applications for Windows 2000 and version 1.0 of the .NET Framework. It focuses on the key elements of authentication, authorization, and secure communication within and across the tiers of distributed .NET Web applications. (This roadmap: 6 printed pages; the entire guide: 608 printed pages)
[edit]
Key Links
- MSDN Home: http://msdn2.microsoft.com/en-us/library/aa302415.aspx
- Amazon: http://www.amazon.com/Building-Microsoft-ASP-NET-Applications-Pro-Developer/dp/0735618909
[edit]
Contents At a Glance
Parts
- Part I, Security Models
- Part II, Application Scenarios
- Part III, Securing the Tiers
- Part IV, Reference
Chapters
- Chapter 1: Introduction
- Chapter 2: Security Model for ASP.NET Applications
- Chapter 3: Authentication and Authorization
- Chapter 4: Secure Communication
- Chapter 5: Intranet Security
- Chapter 6: Extranet Security
- Chapter 7: Internet Security
- Chapter 8: ASP.NET Security
- Chapter 9: Enterprise Services Security
- Chapter 10: Web Services Security
- Chapter 11: Remoting Security
- Chapter 12: Data Access Security
- Chapter 13: Troubleshooting Security
How Tos
- How To: Create a Custom Account to Run ASP.NET 1.1
- How To: Use Forms Authentication with Active Directory in ASP.NET 1.1
- How To: Use Forms Authentication with SQL Server 2000 in ASP.NET 1.1
- How To: Create GenericPrincipal Objects with Forms Authentication in ASP.NET 1.1
- How To: Implement Kerberos Delegation in Windows 2000
- How To: Implement IPrincipal in ASP.NET 1.1
- How To: Create a DPAPI Library in .NET 1.1
- How To: Use DPAPI (Machine Store) from ASP.NET 1.1
- How To: Use DPAPI (User Store) from ASP.NET 1.1 with Enterprise Services
- How To: Create an Encryption Library .NET 1.1
- How To: Store Encrypted Connection Strings in the Registry in ASP.NET 1.1
- How To: Use Role-based Security with Enterprise Services in .NET 1.1
- How To: Call a Web Service Using Client Certificates from ASP.NET 1.1
- How To: Call a Web Service Using SSL from ASP.NET 1.1
- How To: Host a Remote Object in a Windows Service
- How To: Set Up SSL on a Web Server
- How To: Set Up Client Certificates
- How To: Use IPSec to Secure Communication Between Two Servers
- How To: Use SSL to Secure Communication with SQL Server 2000
Reference
- Base Configuration
- Configuration Stores and Tools
- Reference Hub
- How Does It Work?
- ASP.NET Identity Matrix
- Cryptography and Certificates
- .NET Web Application Security
