In-Depth

Books: Secure Your .NET Apps

The .NET Developer''s Guide to Windows Security helps put you on your way to developing secure applications in .NET.

We live in a world where the majority of computers are connected and in need of some form of protection. Developers need to program with this in mind. The .NET Developer's Guide to Windows Security helps you do just that by providing reference information and examples about security-related coding issues.

The author Keith Brown begins by discussing the basic concepts of writing secure code and the thought process you need to develop it successfully. He addresses the most basic issues and increases the complexity gradually as the book progresses. Brown writes all the examples in Managed C++, which is unusual for most books using C#.

Brown covers Kerberos, SIDs, ACLs, and privileges in good detail, and he writes informative sections on impersonation and authentication, helping you determine when is a good time to use these features. Brown concentrates on network-based security issues throughout the majority of the book, though he also addresses some local-based issues as well.

I recommend this book for anyone who is security-conscious, but especially for those just getting started in developing in .NET. It's never too soon to think about how to make your applications secure. The examples are easy to follow, and the author provides a Web site where you can download examples. Security is never an easy subject to cover, but The .NET Developer's Guide to Windows Security manages the job well.

The .NET Developer's Guide to Windows Security
by Keith Brown
Addison Wesley
ISBN: 0321228359
Price: $44.99
Quick Facts: How to use the .NET Framework to develop code with security in mind.
Pros: Covers Kerberos, SIDs, ACLs, privileges, impersonation, and authentication in detail.
Cons: None.

About the Author

David Mack is a technical lead and consultant for the National Intelligence Division at Titan Systems. He has more than 10 years of experience in management and software engineering. Reach him at [email protected].

comments powered by Disqus

Featured

  • Windows Community Toolkit v8.2 Adds Native AOT Support

    Microsoft shipped Windows Community Toolkit v8.2, an incremental update to the open-source collection of helper functions and other resources designed to simplify the development of Windows applications. The main new feature is support for native ahead-of-time (AOT) compilation.

  • New 'Visual Studio Hub' 1-Stop-Shop for GitHub Copilot Resources, More

    Unsurprisingly, GitHub Copilot resources are front-and-center in Microsoft's new Visual Studio Hub, a one-stop-shop for all things concerning your favorite IDE.

  • Mastering Blazor Authentication and Authorization

    At the Visual Studio Live! @ Microsoft HQ developer conference set for August, Rockford Lhotka will explain the ins and outs of authentication across Blazor Server, WebAssembly, and .NET MAUI Hybrid apps, and show how to use identity and claims to customize application behavior through fine-grained authorization.

  • Linear Support Vector Regression from Scratch Using C# with Evolutionary Training

    Dr. James McCaffrey from Microsoft Research presents a complete end-to-end demonstration of the linear support vector regression (linear SVR) technique, where the goal is to predict a single numeric value. A linear SVR model uses an unusual error/loss function and cannot be trained using standard simple techniques, and so evolutionary optimization training is used.

  • Low-Code Report Says AI Will Enhance, Not Replace DIY Dev Tools

    Along with replacing software developers and possibly killing humanity, advanced AI is seen by many as a death knell for the do-it-yourself, low-code/no-code tooling industry, but a new report belies that notion.

Most   Popular

Subscribe on YouTube