Developing More-Secure Microsoft® ASP.NET 2.0 Applications (Pro Developer) (Paperback)

by Dominick Baier (Author)
Key Phrases: binary analysis tools, black box scanners, unmanaged code permission, Active Directory, Page Language, Visual Studio (more...)

Editorial Reviews

Product Description
Get hands-on, expert guidance for developing more secure Web applications with ASP.NET 2.0 with this in-depth reference. The nature of the Web and its underlying communication protocols make Web applications harder to secure and, therefore, primary targets for hacking attacks and other kinds of compromises. This book guides you through the possible vulnerabilities of Web-based applications and shows you how to help mitigate them in your own applications. Start with the ingredients of security-enhanced Web applications from the ground up, beginning with Web server set-up, and learn how to harden that machine for a potentially hostile environment such as the Internet. Then move on to in-depth treatment of crucial topics such as how to use ASP.NET to perform proper input validation; choosing from the numerous options for authenticating and authorizing users; how to store application-related and user-related sensitive data in a secure fashion; how to incorporate detection; and error logging measures. This guide covers how to integrate ASP.NET into the Microsoft Windows® security infrastructure and how to effectively use impersonation, delegation, and Active Directory® directory service. You will also learn about new Microsoft Windows Server™ 2003 features, such as constrained delegation and protocol transition. Coverage extends to one of the most underutilized features of ASP.NET—running in partial trust. The book concludes with guidance on how to conduct audits and penetration tests and how to integrate them in the development process. Written by a leading authority and trainer, this reference comes complete with best practices based on real-world experience and extensive code samples in C#.

From the Publisher
Key Book Benefits:

- Delivers practical, hands-on guidance about Web security and ASP.NET 2.0 development - Features best practices from a leading authority and trainer, based on real-world experience - Provides extensive code examples in C#

See all Editorial Reviews

Product Details

• Paperback: 480 pages
• Publisher: Microsoft Press (October 25, 2006)
• Language: English
• ISBN-10: 0735623317
• ISBN-13: 978-0735623316
• Product Dimensions: 8.7 x 7.4 x 1.3 inches
• Shipping Weight: 2.2 pounds
• Average Customer Review: 5.0 out of 5 stars See all reviews (4 customer reviews)
• Amazon.com Sales Rank: #241,394 in Books (See Bestsellers in Books)

  Popular in these categories: (What's this?)

  #27 in	Books > Computers & Internet > Security & Encryption > Windows Security
  #88 in	Books > Computers & Internet > Microsoft > Development > .NET
  #94 in	Books > Computers & Internet > Web Development > Programming > ASP

Customer Reviews

Most Helpful Customer Reviews

1 of 1 people found the following review helpful:

5.0 out of 5 stars Excellent book for learning the security related aspects of ASP.NET 2.0, March 17, 2008

By	PC (Seattle, WA) - See all my reviews

I am an ASP.NET newbie and found this book very helpful in understanding authentication, authorization, role based security, input validation etc. I am a desktop developer and found the web development model difficult to understand initially but this book cleared up my mind in the security related parts. The book is written in a very clear and concise manner and uses diagrams to explain concepts which which I found very helpful. There are practical advices sprinkled all over the book along with the "why" of it.
In short, this is a very well written book which improved my asp.net knowledge and skills considerably. Highly recommended.

3 of 4 people found the following review helpful:

5.0 out of 5 stars Highly Recommended, September 6, 2007

By	M. Morrison (Los Angeles, CA) - See all my reviews (REAL NAME)

I really wish I could give this book 6 stars, it has been an indespensable resource for learning techniques to develop more secure applications. With so many dangers lurking out there it is increasingly important to not only be able to develop secure applications but to understand the .net security mechanisms as well. This book will leave no questions unanswered, if for no other reason purchase this book for chapter 8 on partial trust, I have not come across any resource that covered this topic so thoroughly. It's treatment of sandboxing and code partitioning alone make the book worth every penny paid. If your looking to continually improve the quality of your code and sites don't leave this book off your list.

5.0 out of 5 stars Does the job, November 22, 2008

By	David J. Graper (Albany, NY) - See all my reviews (REAL NAME)

I needed to get Kerberos authentication working between a web service on one IIS server, a windows service on another server, and SQL server running on a third server and was running into the Windows NT authentication "double hop" problem. I struggled for days reading various web sources trying to make heads or tails of how to do it with no success until I found it here using the "Look Inside" feature here on Amazon. This tells you how to do it, point by point, in surprisingly clear writing.

I immediately bought the book and have been grinding my way through it ever since. It's about security so it's not that fun (who wouldn't rather be learning about Ajax, SilverLight, or anything else that will wow the people at work) but it's surprisingly palatable for developers like me (and most developers I've ever met) who think of security issues as the equivalent of cod liver oil.