Improving Web Application Security: Threats and - CGISecurity

Chapter 8: Code Access Security in Practice 219SummaryCode access security allows you to restrict what your code can do, restrict which codecan call your code, and identify code. In full trust environments where your code andthe code that calls you have the unrestricted set of all permissions, code accesssecurity is of less significance.If your code supports partial trust callers, the security risks are that much greater. Inpartial trust scenarios, code access security enables you to mitigate some of theadditional risks and allows you to constrain privileged code.Additional ResourcesFor more information, see the following resources:●●●“Security in .NET: The Security Infrastructure of the CLR Provides Evidence,Policy, Permissions, and Enforcement Services” by Don Box, MSDN Magazine,September 2002, at http://msdn.microsoft.com/msdnmag.“Security in .NET: Enforce Code Access Rights with the CommonLanguage Runtime” by Keith Brown, MSDN Magazine, February 2001,at http://msdn.microsoft.com/msdnmag..NET Framework Security by LaMacchia, Lange, Lyons, Martin and Price, publishedby Addison Wesley.