Building Secure ASP.NET Applications - People Search Directory

Chapter 1: Introduction 3
How You Should Read This Guide
The guide has been developed to be modular. This allows you to pick and choose
which chapters to read. For example, if you are interested in learning about the
in-depth security features provided by a specific technology, you can jump straight
to Part III of the guide (Chapters 8 through 12), which contains in-depth material
covering ASP.NET, Enterprise Services, Web Services, .NET Remoting, and data
access.
However, you are encouraged to read the early chapters (Chapters 1 through 4) in
Part I of the guide first, because these will help you understand the security model
and identify the core technologies and security services at your disposal. Application
architects should make sure they read Chapter 3, which provides some key
insights into designing an authentication and authorization strategy that spans the
tiers of your Web application. Part I will provide you with the foundation materials
which will allow you to extract maximum benefit from the remainder of the guide.
The intranet, extranet, and Internet chapters (Chapters 5 through 7) in Part II of the
guide will show you how to secure specific application scenarios. If you know the
architecture and deployment pattern that is or will be adopted by your application,
use this part of the guide to understand the security issues involved and the basic
configuration steps required to secure specific scenarios.
Finally, additional information and reference material in Part IV of the guide will
help further your understanding of specific technology areas. It also contains a
library of How To articles which enable you to develop working security solutions
in the shortest possible time.
Organization of the Guide
The guide is divided into four parts. The aim is to provide a logical partitioning,
which will help you to more easily digest the content.
Part I, Security Models
Part 1 of the guide provides a foundation for the rest of the guide. Familiarity with
the concepts, principles, and technologies introduced in Part 1 will enable you to
extract maximum value from the remainder of the guide. Part 1 contains the following
chapters.
● Chapter 1, “Introduction”
● Chapter 2, “Security Model for ASP.NET Applications “
●
●
Chapter 3, “Authentication and Authorization”
Chapter 4, “Secure Communication”