Corrections, Comments, and Help
by Michael James Bond, Ed Robinson
Security for Microsoft® Visual Basic® .NET
- Security for Microsoft® Visual Basic® .NET
- Introduction
- I. Development Techniques
- 1. Encryption
- 2. Role-Based Authorization
- 3. Code-Access Security
- How Actions Are Considered Safe or Unsafe
- What Prevents Harmful Code from Executing?
- It’s On By Default
- Security Features and the Visual Basic .NET Developer
- Code-Access Security vs. Application Role-Based Security
- Run Your Code in Different Security Zones
- Code-Access Security in the Real World
- Summary
- 4. ASP.NET Authentication
- 5. Securing Web Applications
- II. Ensuring Hack-Resistant Code
- 6. Application Attacks and How to Avoid Them
- 7. Validating Input
- 8. Handling Exceptions
- 9. Testing for Attack-Resistant Code
- III. Deployment and Configuration
- 10. Securing Your Application for Deployment
- Deployment Techniques
- Code-Access Security and Deployment
- Certificates and Signing
- Deploying .NET Security Policy Updates
- Protecting Your Code—Obfuscation
- Deployment Checklist
- Deployment in the Real World
- Summary
- 11. Locking Down Windows, Internet Information Services, and .NET
- 12. Securing Databases
- 10. Securing Your Application for Deployment
- IV. Enterprise-Level Security
- 13. Ten Steps to Designing a Secure Enterprise System
- Design Challenges
- Step 1: Believe You Will Be Attacked
- Step 2: Design and Implement Security at the Beginning
- Step 3: Educate the Team
- Step 4: Design a Secure Architecture
- Step 5: Threat-Model the Vulnerabilities
- Step 6: Use Windows Security Features
- Step 7: Design for Simplicity and Usability
- Step 8: No Back Doors
- Step 9: Secure the Network with a Firewall
- Step 10: Design for Maintenance
- Summary
- 14. Threats—Analyze, Prevent, Detect, and Respond
- 15. Threat Analysis Exercise
- 16. Future Trends
- 13. Ten Steps to Designing a Secure Enterprise System
- A. Guide to the Code Samples
- B. Contents of SecurityLibrary.vb
- C. About the Authors
- Index
- About the Authors
Every effort has been made to ensure the accuracy of this book and the sample files. If you run into a problem, Microsoft Press provides corrections for its books through the World Wide Web at the following Web site: http://www.microsoft.com/mspress/support/.
If you have problems, comments, or ideas regarding this book, please send them to Microsoft Press. You can contact Microsoft Press by sending e-mail to: [email protected]. Or you can send postal mail to
Microsoft Press
Attn: Security for Microsoft Visual Basic .NET Editor
One Microsoft Way
Redmond, WA 98052-6399
Please note that support for the Visual Basic .NET software product itself is not offered through the preceding addresses.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.