.NET news » Security 
.NET Security and Cryptography (Integrated .NET Series from Object Innovations)
Authors: Peter Thorsteinson, G. Gnana Arun Ganesh
Average rating: (3 reviews)
More .NET Security books
Hashing, MACs, and Digital Signatures in .NET
This article covers what the differences are between hashing, MAC and digital signatures. It presumes a certain level of knowledge about encryption methods especially the difference between symmetric and asymmetric encryption. The article does not cover how to perform encryption or about key management. There are some code examples on how to perform each of the technologies using C# in .NET v2.0.
Using Enterprise Library in ASP.NET 2.0 Partial Trust Mode
The Enterprise Library Application Blocks aren't useful only in Windows Forms applications; you can use them in ASP.NET too by downloading a set of patch files and configuring the security settings appropriately. Find out how.
31 Oct 2006, 18:02:26 Source: Using Enterprise Library in ASP.NET 2.0 Partial Trust Mode
Tags: ASP.NET
Security
Online Article: Fundamentals of WCF Security
Windows Communication Foundation (WCF) is a secure, reliable, and scalable messaging platform for the .NET Framework 3.0.With WCF, SOAP messages can be transmitted over a variety of supported protocols including IPC (named pipes), TCP, HTTP and MSMQ. Like any distributed messaging platform, you must establish security policies for protecting messages and for authenticating and authorizing calls. This article will discuss how WCF accomplishes this.
Threat Modeling: Uncover Security Design Flaws Using The STRIDE Approach
Whenever you build a new system you should consider how an in¬truder might go about attacking it and then build in appropriate defenses at design time.
11 Oct 2006, 19:00:00 Source: Threat Modeling: Uncover Security Design Flaws Using The...
Tags: Security
Extending SDL: Documenting And Evaluating The Security Guarantees Of Your Apps
In this article, the author presents an extension to the Security Development Lifecycle Which could promote a better flow of information between users and designers of software security features.
11 Oct 2006, 19:00:00 Source: Extending SDL: Documenting And Evaluating The Security...
Tags: Security
SQL Security: New SQL Truncation Attacks And How To Avoid Them
This article discusses some new threats to your SQL Web app that include modifying SQL statements or injecting SQL code even if the code has escaped the delimiting characters.
11 Oct 2006, 19:00:00 Source: SQL Security: New SQL Truncation Attacks And How To Avoid...
Tags: Security
Database
Security Briefs: Limited User Problems and Split Knowledge
- Why won't my simple Windows® Communication Foundation service start when I run it as a non-administrator?
- What is the best way to implement split knowledge and dual control of keys?
11 Oct 2006, 19:00:00 Source: Security Briefs: Limited User Problems and Split Knowledge
Tags: Security
A simple but robust software protection and activation
A simple but robust software protection and activation.
6 Oct 2006, 10:15:00 Source: A simple but robust software protection and activation
Tags: Security
Examples
Simple Password Manager Using System.Security
Password Manager is a System.Security usage example using SecureString and SymmetricAlgorithms.
The Digital Signing Framework of the Open Packaging Conventions
Discusses the OPC Digital Signing Framework, providing an overview of the package components and supporting services, and examples of signing policy and its implementation.

