Creating Secure Applications

Creating Reliable And Robust Applications With Visual Studio 2005 And SQL Server 2005 Andrew Coates Developer Evangelist Microsoft Australia http://blogs.msdn.com/acoat

Agenda ,[object Object],[object Object],[object Object]

Introduction: Security Today ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Visual Studio 2005 and .NET 2.0 Enhancements

Managed Code ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Develop Under Less Privileged Account ,[object Object],[object Object],[object Object],[object Object]

Security Principles to Live By Practical Least Privilege ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Code Access Security ,[object Object],[object Object],[object Object],[object Object]

Code Access Security (CAS) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Code Access Security Evidence Policy + Permissions

Stack Walk ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Stack Walk P .Demand() Stack walk for permission p Stack walk example Assembly A Assembly B Assembly C Assembly D PermissionSet PermissionSet PermissionSet PermissionSet

Sandboxing ,[object Object],[object Object],[object Object],AppDomain.CreateDomain( string friendlyName, Evidence securityInfo, AppDomainSetup info, PermissionSet grantSet, params StrongName[] fullTrustAssemblies );

Security Transparent Code ,[object Object],[object Object],[object Object]

Global Assembly Cache (GAC) Is Full-Trust ,[object Object],[object Object],[object Object]

Increased Strong Name (SN) Key Size ,[object Object],[object Object],[object Object],sn -k 2708 invalidKey.snk sn -k 2048 largekey.snk Failed to generate a strong name key pair -- Invalid flags specified

Permissions Calculator ,[object Object],[object Object],[object Object]

Debugging Enhancements ,[object Object],[object Object]

Debug and IntelliSense In Zone

FxCop ,[object Object],[object Object],[object Object],[object Object]

Other Managed Code Security Enhancements ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What Else Is New In .NET 2.0 Security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Team Foundation Server Check In Policies ,[object Object],[object Object],[object Object]

Unmanaged Code ,[object Object],[object Object],[object Object],[object Object]

SQL Server 2005 Enhancements ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Secure By Default ,[object Object],[object Object],[object Object]

Surface Area Configuration Tool

Password Policy And Authentication ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

User-Schema Separation ,[object Object],[object Object],[object Object],[object Object]

Granular Permissions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Execution Context ,[object Object],[object Object],[object Object],[object Object]

Endpoint Security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Encryption ,[object Object],[object Object],[object Object]

Other Stuff (Canberra) ,[object Object],[object Object]

Some More Microsoft Resources ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Creating Secure Applications

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Destacado

Destacado (8)

Similar a Creating Secure Applications

Similar a Creating Secure Applications (20)

Último

Último (20)

Creating Secure Applications