Creating Secure Applications

Creating Reliable And Robust Applications With Visual Studio 2005 And SQL Server 2005 Andrew Coates Developer Evangelist Microsoft Australia http://blogs.msdn.com/acoat

Agenda ,[object Object],[object Object],[object Object]

Introduction: Security Today ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Visual Studio 2005 and .NET 2.0 Enhancements

Managed Code ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Develop Under Less Privileged Account ,[object Object],[object Object],[object Object],[object Object]

Security Principles to Live By Practical Least Privilege ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Code Access Security ,[object Object],[object Object],[object Object],[object Object]

Code Access Security (CAS) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Code Access Security Evidence Policy + Permissions

Stack Walk ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Stack Walk P .Demand() Stack walk for permission p Stack walk example Assembly A Assembly B Assembly C Assembly D PermissionSet PermissionSet PermissionSet PermissionSet

Sandboxing ,[object Object],[object Object],[object Object],AppDomain.CreateDomain( string friendlyName, Evidence securityInfo, AppDomainSetup info, PermissionSet grantSet, params StrongName[] fullTrustAssemblies );

Security Transparent Code ,[object Object],[object Object],[object Object]

Global Assembly Cache (GAC) Is Full-Trust ,[object Object],[object Object],[object Object]

Increased Strong Name (SN) Key Size ,[object Object],[object Object],[object Object],sn -k 2708 invalidKey.snk sn -k 2048 largekey.snk Failed to generate a strong name key pair -- Invalid flags specified

Permissions Calculator ,[object Object],[object Object],[object Object]

Debugging Enhancements ,[object Object],[object Object]

Debug and IntelliSense In Zone

FxCop ,[object Object],[object Object],[object Object],[object Object]

Other Managed Code Security Enhancements ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What Else Is New In .NET 2.0 Security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Team Foundation Server Check In Policies ,[object Object],[object Object],[object Object]

Unmanaged Code ,[object Object],[object Object],[object Object],[object Object]

SQL Server 2005 Enhancements ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Secure By Default ,[object Object],[object Object],[object Object]

Surface Area Configuration Tool

Password Policy And Authentication ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

User-Schema Separation ,[object Object],[object Object],[object Object],[object Object]

Granular Permissions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Execution Context ,[object Object],[object Object],[object Object],[object Object]

Endpoint Security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Encryption ,[object Object],[object Object],[object Object]

Other Stuff (Canberra) ,[object Object],[object Object]

Some More Microsoft Resources ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Creating Secure Applications

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (8)

Ähnlich wie Creating Secure Applications

Ähnlich wie Creating Secure Applications (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Creating Secure Applications