Loading
Encrypt and Decrypt Sensitive Metadata Within Your Config file
In a certain cases, metadata embedded within your configuration file is sensitive. In fact, imagine that you develop an application that uses a data base as data source; all information about this data base is located in the configuration file. What if a hacker success to log into your configuration files and obtains the connection string and other metadata about your data base??
Security Setting for Excel
To run the excel report, security settings are required for excel application because while working with the excel application we are going to use some of the classes for manipulating the data inside the file. This article shows how to grant access or rights to those files.
Using Symmetric Algorithms to Encrypt Data
In this article, I will propose a method of how to encrypt data and store it using symmetric algorithms whose are, in fact, four integrated classes within the .Net framework, namely DES,RC2,Rijndael and TripleDES but I will perform the task using the two last ones as they are the mostly used in real time cases.
Exploring Security in .NET: Part I
This article highlights some of the key concepts of .NET Security like Code Access Security, Evidence based Security and many more.
Database Provider-based ASP.NET Membership Provider
This article is intended to explore the provider pattern in the context of a membership provider.
Developing Secure Web Site with ASP.NET and IIS: PartII
Authentication is a very important element of developing secure sites. It is the starting point of a secure environment for the protected resources. I have discussed several authentication mechanisms available in ASP.NET and how they join with IIS to provide a secure platform to develop sites in Part I of this article. I will be looking at Form Authentication and how to implement it in several sample web applications.
Developing Secure Web Sites with ASP.NET and IIS: Part I
Learn how ASP.NET, IIS, and Windows security work together to authenticate users and control access using anonymous, Basic, Digest, and Windows authentication.
.NET SQL Authorization Manager
.NET Sql Authorization Manager (AzMan x .NET 2.0) allows you to set Item-based permissions for Authorization Manager-enabled Microsoft.NET 2.0 applications. Storage reside on a MS Sql Server DataBase and can be administrated by a managed MMC 3.0 Snap-In.
Cryptography in Microsoft.NET Part III: Digital Certificates
Part-I and II of this article discussed the basics of cryptography and its applications in real world enterprise solutions. Part-I discussed the nitty-gritty of encryption and its implementation in Microsoft .NET Framework Class Library (FCL). Part-II discussed the hashing and signature algorithms and their implementation in FCL. It also discussed the two common cryptography applications namely digital envelope & digital signature.
Cryptography in Microsoft.NET Part I: Encryption
Microsoft .NET has pre-built solutions to all of these in each application domain, viz., ASP. NET, Web Services, Serviced Component etc. It enables building secured application by simple configuration as in ASP.NET to full fledged programmable security as in code access security and Cryptography.
Extracting Modules and Component(RSAParameter) from X509Certificate PublicKey
In some applications, it might be necessary to extract the modulus and exponent from the X509Certificate PublicKey. The X509Certificate.GetPublicKey() returns a byte array that contains the ASN.1 Encoding information along with the modulus and exponent as described in the RFC2459.
Understanding How Assert Effects Security
Assert is a security action that is evaluated at run time. Code Access Permission classes and Permission Sets support a method called Assert. Using the Assert method to control access to resources or actions will allow your code to perform actions that it normally has permission to perform and will allow other callers up stream in the call stack to have access that they would not normally have.
System.Security.Principal in .NET
Explains .NET security principals and identities, including IIdentity, IPrincipal, WindowsIdentity, role checks, PrincipalPermission, and Windows impersonation.
CASPOL Tool in .NET
Learn how to use the CASPOL command-line tool to view .NET code groups, policy levels, and permission sets for assemblies.
Viewing Assembly Permissions
In this article I will show you how you can view the Code Groups that an assembly belongs to and what permissions belong to the assembly. I will demonstrate the Caspol utility supplied with the .NET SDK.
Configuring Publisher Policy File
Versioning in the Microsoft .NET Framework is managed at the assembly level and is only used when locating strong-named assemblies. By default, the common language runtime loads the assembly whose entire version number matches the version number in the calling assembly's metadata.
Code Access Security
Learn how .NET Code Access Security uses assembly evidence, code groups, permission sets, and policy levels to control what code can access.
Securing Your ASP.NET Web Applications
Learn how to secure ASP.NET web applications through input validation and defenses against XSS, SQL injection, buffer overflows, canonicalization issues, and access-control threats.
Protecting IL Code from unauthorised Disassembling
Microsoft .NET proved a mechanism where the code written in VB.NET, C# or any CLS compliant languages to generate MSIL (Microsoft Intermediate Language)code which targets the CLR and executes. This is an excellent mechanism to abstract the high level code from the underlying hardware.
.NET Security in C#
This article shows how to make file I/O access be denied if the user running the application did not have administrator privileges.
Creating a Login User Control
In this article, we have started with an introduction to the UserControl and have learnt to use the ADO+ DataReader.As we seen User Controls simplifies several common Web application scenarios.User Controls allow developers to easily define custom controls using the same programming techniques for writing Web Forms.
XML Signatures in Microsoft .NET
In this article we will explore XML Signature specification from W3C and its implementation in .NET using C#.
Role Based Security Using Authorization Manager in Windows Server 2003
Authorization Manager in Windows 2003 is the more flexible, scalable and easier administration tool for role based security. Using Authorization Manager we can define roles and the tasks that roles can perform.
Security in Microsoft .Net Framework: Part I
This article explain you, how to provide security to your applications.
Authorization and Programmatic Impersonation
By default, ASP.NET applications usually do not impersonate the original caller for design, implementation, and scalability reasons. For example, impersonating prevents effective middle-tier connection pooling, which can have a severe impact on application scalability.
The Realization of WS-Security Related Specifications by WSE 3.0.
In this article, we are going to learn the basic concepts of WS-Security related specifications and how they are implemented by Microsoft Web Service Enhancements 3.0 technology.
10 Measures to Reduce Credit Card Fraud for Internet Merchants
The purpose of this document is to introduce 10 preventative measures that merchants can take in order to minimize credit card fraud. In addition, we would like to take this opportunity to introduce a complete suite of FraudLabs™ Web Services specializing in the analysis of credit card fraud risk for Internet merchants.
How to Maintain a CodeGroup in Security Policy at Runtime?
Whenever protected resources are accessed by an assembly, it’s permissions are determined by the code access security system of CLR. Each permission set granted to an assembly is based on the assembly's evidence (such as its URL or publisher certificate, strong name), which in turn is based on configurable security policy.
ASP.NET Security With SQL Server 2005
This article focuses on security concerm when using SQL Server 2005 in ASP.NET application.
Test for User Group Membership in ASP.NET C#
This article describes a simple approach to determining whether or not a logged in user is a member of a group within the context of an asp.net web based application.
