Programming .Net Security

Adam Freeman is a professional programmer and the author of two early Java books, Programming the Internet with Java and Active Java, both published by Addison Wesley, as well as Java course materials. His recent experience architecting a green-field e-commerce platform has given him an in-depth understanding of the current security challenges facing those developing large scale distributed systems. Adam has previously worked for Netscape, Sun Microsystems and the NASDAQ stock exchange.Allen Jones has been developing Windows solutions since 1990 and working with Windows NT and Win32 since 1993. He was one of the first MCSEs to qualify anywhere in the world. For the last 3 years, Allen has been developing e-commerce and security systems for large corporations and financial institutions. He is a former employee of Microsoft in both Australia and the UK and co-author, with Adam Freeman, of C SHARP for Java Developers and .NET XML Web Services Step by Step , both from Microsoft Press.

• Preface Part I. Fundamentals 1. Security Fundamentals The Need for Security Roles in Security Understanding Software Security End-to-End Security 2. Assemblies Assemblies Explained Creating Assemblies Shared Assemblies Strong Names Publisher Certificates Decompiling Explained 3. Application Domains Application Domains Explained 4. The Lifetime of a Secure Application Designing a Secure .NET Application Developing a Secure .NET Application Security Testing a .NET Application Deploying a .NET Application Executing a .NET Application Monitoring a .NET Application Part II. .NET Security 5. Introduction to Runtime Security Runtime Security Explained Introducing Role-Based Security Introducing Code-Access Security Introducing Isolated Storage 6. Evidence and Code Identity Evidence Explained Programming Evidence Extending the .NET Framework 7. Permissions Permissions Explained Programming Code-Access Security Extending the .NET Framework 8. Security Policy Security Policy Explained Programming Security Policy Extending the .NET Framework 9. Administering Code-Access Security Default Security Policy Inspecting Declarative Security Statements Using the .NET Framework Configuration Tool Using the Code-Access Security Policy Tool 10. Role-Based Security Role-Based Security Explained Programming Role-Based Security 11. Isolated Storage Isolated Storage Explained Programming Isolated Storage Administering Isolated Storage Part III. .NET Cryptography 12. Introduction to Cryptography Cryptography Explained Cryptography Is Key Management Cryptographic Attacks 13. Hashing Algorithms Hashing Algorithms Explained Programming Hashing Algorithms Keyed Hashing Algorithms Explained Programming Keyed Hashing Algorithms Extending the .NET Framework 14. Symmetric Encryption Encryption Revisited Symmetric Encryption Explained Programming Symmetrical Encryption Extending the .NET Framework 15. Asymmetric Encryption Asymmetric Encryption Explained Programming Asymmetrical Encryption Extending the .NET Framework 16. Digital Signatures Digital Signatures Explained Programming Digital Signatures Programming XML Signatures Extending the .NET Framework 17. Cryptographic Keys Cryptographic Keys Explained Programming Cryptographic Keys Extending the .NET Framework Part IV. .NET Application Frameworks 18. ASP.NET Application Security ASP.NET Security Explained Configuring the ASP.NET Worker Process Identity Authentication Authorization Impersonation ASP.NET and Code-Access Security 19. COM+ Security COM+ Security Explained Programming COM+ Security Administering COM+ Security 20. The Event Log Service The Event Log Service Explained Programming the Event Log Service Part V. API Quick Reference 21. How to Use This Quick Reference Finding a Quick-Reference Entry Reading a Quick-Reference Entry 22. Converting from C SHARP to VB Syntax General Considerations Classes Structures Interfaces Class, Structure, and Interface Members Delegates Enumerations 23. The System.Security Namespace 24. The System.Security.Cryptography Namespace 25. The System.Security.Cryptography.X509Certificates Namespace 26. The System.Security.Cryptography.Xml Namespace 27. The System.Security.Permissions Namespace 28. The System.Security.Policy Namespace 29. The System.Security.Principal Namespace Index