.NET news » Security

Using a NetworkStream with raw serialization, GZipStream and CryptoStream

Secure file download using basic authentication, the interesting part is that it maintains two separate entry points for uploading and downloading a file

This is a simple wrapper class that provides an easy interface for encrypting and decrypting byte arrays and strings.

An article on automatically switching between HTTP and HTTPS protocols without hard-coding absolute URLs.

Many classic ASP applications exist side-by-side with newer ASP.NET applications, sometimes leading to a need to transfer or share information between the two. This article shows one method of transferring such information securely.

A CAPTCHA control that is simple, secure and easy to use.

Security Briefs: A First Look at InfoCard

Hasher is a tool to help programmers implement standard hashing and checksum algorithms into their own software. Written entirely in C# and designed for use in the .NET Framework, Hasher providers a uniform interface to easily use any of the algorithms contained within this library in other programs. Hasher is planned to encapsulate a wide variety of cryptographic hashing and checksum algorithms. Focusing on compatibility, speed, and ease-of-use, Classless.Hasher currently supports over 25 different algorithms including the "basics" such as CRC, MD5, and SHA, as well as others like HAVAL, Tiger, Snefru, and Whirlpool.

Xenocode Postbuild 2006 breakthrough technology allows .NET applications to run on any Windows PC, with or without the Framework, counteracts decompilation and reverse engineering, optimizes application size and performance, and dramatically reduces test and support costs by eliminating "DLL/versioning hell".

One of the major benefits of writing .NET code to run in the Common Language Runtime (CLR) hosted in any environment is code access security (CAS).CAS provides a code-based-rather than user-based-authorization scheme to prevent various kinds of luring and other code attacks. But how does that security scheme coexist with SQL Server 2005's own, newly enhanced security features? By default your .NET code is reasonably secure, but it's all too easy for the two security schemes to butt heads and cause you grief. In this article I'll look briefly at the concept behind CAS and a few new security features in SQL Server 2005, then explore how to make the two systems work for you instead of against you as you take advantage of these advanced programming features in SQL Server.