Building Secure ASP.NET Applications - People Search Directory

At a Glance xxxv
Read this chapter to learn how to:
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
Configure the various ASP.NET authentication modes.
Implement Forms authentication.
Implement Windows authentication.
Work with IPrincipal and IIdentity objects.
Effectively use the IIS and ASP.NET gatekeepers.
Configure and use ASP.NET File authorization.
Configure and use ASP.NET URL authorization.
Implement declarative, imperative and programmatic role-based security, using
principal permission demands and IPrincipal.IsInRole.
Know when and when not to use impersonation within an ASP.NET Web
application.
Choose an appropriate account to run ASP.NET.
Access local and network resources using the ASP.NET process identity.
Access remote SQL Server databases using the local ASPNET account.
Call COM objects from ASP.NET.
Effectively use the anonymous Internet user account in Web hosting
environments.
Store secrets in an ASP.NET Web application.
Secure session and view state.
Configure ASP.NET security in Web Farm scenarios.
Chapter 9 – Enterprise Services Security
This chapter explains how to secure business functionality in serviced components
contained within Enterprise Services applications. It shows you how and when to
use Enterprise Services (COM+) roles for authorization, and how to configure RPC
authentication and impersonation. It also shows you how to securely call serviced
components from an ASP.NET Web application and how to identify and flow the
original caller’s security context through a middle tier serviced component.