Programming .net Security

In Programming .NET Security, experienced developers Adam Freeman and Allen Jones not only provide not only a comprehensive overview of .NET security facilities and APIs, but also explain key concepts and common design patterns that developers must understand to build applications that can survive in a hostile, networked world.
The authors begin with security fundamentals, including the resources and secrets, and the use of identity, trust, authentication, and authorization to control access to them. Two particularly useful .NET features, assemblies and application domains, are considered in separate chapters, followed by a discussion of the phases of a typical software development project and the opportunities each phase provides for uncovering vulnerabilities and defending against them.
In later sections, Programming .NET Security systematically explores .NET security features, including runtime support, evidence, code identity, permissions, Code Access Security (CAS), role-based security, and much more. An entire section is devoted to .NET support for cryptography, followed by chapters that deal with features unique to ASP.NET and COM+ component services. A final chapter shows how the Windows Event Log Service can be used to audit Windows security events.
Programming .NET Security also includes an API Quick Reference to all the types of the principal security-related namespaces of the .NET class libraries.