The .Net Developer's Guide To Windows Security: Brown, Keith: 9780321228352: Amazon.com: Books

Paperback
$5.99

Buy used:

$5.99

$15.76 delivery July 26 - August 16. Details

Deliver to Finland

Used: Good | Details

Sold by ThriftBooks-Phoenix

Access codes and supplements are not guaranteed with used items.

In stock

Added to

Unable to add item to List. Please try again.

Other sellers on Amazon

Used (7) from $9.48

Image Unavailable

Image not available for
Color:

To view this video download Flash Player

Follow the author

The .Net Developer's Guide To Windows Security 1st Edition

by Keith Brown (Author)

3.6 21 ratings

See all formats and editions

"As usual, Keith masterfully explains complex security issues in down-to-earth and easy-to-understand language. I bet you'll reach for this book often when building your next software application."
--Michael Howard, coauthor, Writing Secure Code

"When it comes to teaching Windows security, Keith Brown is 'The Man.' In The .NET Developer's Guide to Windows Security, Keith has written a book that explains the key security concepts of Windows NT, Windows 2000, Windows XP, and Windows Server 2003, and teaches you both how to apply them and how to implement them in C# code. By organizing his material into short, clear snippets, Brown has made a complicated subject highly accessible."
--Martin Heller, senior contributing editor at Byte.com and owner of Martin Heller & Co.

"Keith Brown has a unique ability to describe complex technical topics, such as security, in a way that can be understood by mere mortals (such as myself). Keith's book is a must read for anyone attempting to keep up with Microsoft's enhancements to its security features and the next major version of .NET."
--Peter Partch, principal software engineer, PM Consulting

"Keith's book is a collection of practical, concise, and carefully thought out nuggets of security insight. Every .NET developer would be wise to keep a copy of this book close at hand and to consult it first when questions of security arise during application development."
--Fritz Onion, author of Essential ASP.NET with Examples in C#

The .NET Developer's Guide to Windows Security is required reading for .NET programmers who want to develop secure Windows applications. Readers gain a deep understanding of Windows security and the know-how to program secure systems that run on Windows Server 2003, Windows XP, and Windows 2000.

Author Keith Brown crystallizes his application security expertise into 75 short, specific guidelines. Each item is clearly explained, cross-referenced, and illustrated with detailed examples. The items build on one another until they produce a comprehensive picture of what tools are available and how developers should use them.

The book highlights new features in Windows Server 2003 and previews features of the upcoming version 2.0 of the .NET Framework. A companion Web site includes the source code and examples used throughout the book.

Topics covered include:

Kerberos authentication
Access control
Impersonation
Network security
Constrained delegation
Protocol transition
Securing enterprise services
Securing remoting
How to run as a normal user and live a happy life
Programming the Security Support Provider Interface (SSPI) in Visual Studio.NET 2005

Battle-scarred and emerging developers alike will find in The .NET Developer's Guide to Windows Security bona-fide solutions to the everyday problems of securing Windows applications.

Report an issue with this product or seller

ISBN-10

0321228359
ISBN-13

978-0321228352
Edition

1st
Publisher

Addison-Wesley Professional
Publication date

September 15, 2004
Language

English
Dimensions

6.75 x 1 x 9 inches
Print length

392 pages
See all details

Editorial Reviews

From the Back Cover

"As usual, Keith masterfully explains complex security issues in down-to-earth and easy-to-understand language. I bet you'll reach for this book often when building your next software application."
--Michael Howard, coauthor, Writing Secure Code

"When it comes to teaching Windows security, Keith Brown is 'The Man.' In The .NET Developer's Guide to Windows Security, Keith has written a book that explains the key security concepts of Windows NT, Windows 2000, Windows XP, and Windows Server 2003, and teaches you both how to apply them and how to implement them in C# code. By organizing his material into short, clear snippets, Brown has made a complicated subject highly accessible."
--Martin Heller, senior contributing editor at Byte.com and owner of Martin Heller & Co.

"Keith Brown has a unique ability to describe complex technical topics, such as security, in a way that can be understood by mere mortals (such as myself). Keith's book is a must read for anyone attempting to keep up with Microsoft's enhancements to its security features and the next major version of .NET."
--Peter Partch, principal software engineer, PM Consulting

"Keith's book is a collection of practical, concise, and carefully thought out nuggets of security insight. Every .NET developer would be wise to keep a copy of this book close at hand and to consult it first when questions of security arise during application development."
--Fritz Onion, author of Essential ASP.NET with Examples in C#

The .NET Developer's Guide to Windows Security is required reading for .NET programmers who want to develop secure Windows applications. Readers gain a deep understanding of Windows security and the know-how to program secure systems that run on Windows Server 2003, Windows XP, and Windows 2000.

Author Keith Brown crystallizes his application security expertise into 75 short, specific guidelines. Each item is clearly explained, cross-referenced, and illustrated with detailed examples. The items build on one another until they produce a comprehensive picture of what tools are available and how developers should use them.

The book highlights new features in Windows Server 2003 and previews features of the upcoming version 2.0 of the .NET Framework. A companion Web site includes the source code and examples used throughout the book.

Topics covered include:

Kerberos authentication
Access control
Impersonation
Network security
Constrained delegation
Protocol transition
Securing enterprise services
Securing remoting
How to run as a normal user and live a happy life
Programming the Security Support Provider Interface (SSPI) in Visual Studio.NET 2005

Battle-scarred and emerging developers alike will find in The .NET Developer's Guide to Windows Security bona-fide solutions to the everyday problems of securing Windows applications.

About the Author

Keith Brown focuses on application security at Pluralsight, which he cofounded with several other .NET experts to foster a community, develop content, and provide premier training. Keith regularly speaks at conferences, including TechEd and WinDev, and serves as a contributing editor and columnist to MSDN Magazine.

Excerpt. © Reprinted by permission. All rights reserved.

This book was written for the many thousands of people involved in designing and writing software for the Microsoft .NET platform. It is chock-full of tips and insights about user-based security, which I like to term "Windows security" because it's been around in one form or another since Windows NT first shipped. Given the plethora of books that cover the new security features in the .NET Framework, such as code access security and ASP.NET forms authentication, I decided to write a book to help folks with the basics of Windows security, a topic that most other books miss entirely or get subtly or blatantly wrong. This book is in some sense a second edition of my first security book, Programming Windows Security, but I hope that you will find it immensely more approachable and practical. I've tried to distill the Zen of these topics into small tidbits of information--items that link to one another--allowing you to read the book in any order that suits you. I hope that you'll find the format of 75 concise tidbits of information helpful as a reference. The "what is" items focus on explaining concepts, while the "how to" items focus on helping you perform a common task.

Within these pages I cover security features in various versions of Windows based on Windows NT. This includes Windows 2000, Windows XP Professional, and Windows Server 2003, but does not include 16-bit Windows or any of the Win9X flavors (Windows 95/98, Windows ME, Windows XP Home Edition). So, when I talk about "Windows" I'm referring to the versions based on Windows NT. Whenever I talk about the file system, I'm assuming that you're using NTFS, not FAT partitions. Whenever I talk about domains, I'm assuming Windows 2000 or greater. If you're still living with a Windows NT 4 domain, you have my sincere condolences!

Many people have expressed surprise that I occasionally talk about Win32 APIs and refer to Win32 header files in a book for .NET programmers. I wish I didn't have to do this, but as anyone who has experience with the .NET Framework knows, the framework class library wraps only a fraction of the functionality of the Windows platform as of this writing. The coverage will get better over time, but to do many things in Windows (including security programming), you often need to call native Win32 APIs. Even as version 2.0 of the framework is being revealed in beta 1, you can see that coverage increasing, but it's still not complete. In any case, I've tried to make it clear in the prose when I'm talking about a Win32 API versus a .NET Framework class, and I've provided lots of sample code and helper classes written in Managed C++ that you can leverage to avoid having to call those APIs yourself.

This book can be found online (in its entirety) in hyperlinked form on the Web at winsecguide.net, where I believe you'll find it to be a great reference when you're connected. I plan to continue filling in more items over time, so subscribe to the RSS feed on the book for news. You can also download samples and tools that I mention in the book from this Web site. Errata will be posted to this site as well, so if you find a problem please let me know.

Good luck in your endeavors!

Keith Brown
Highlands Ranch, CO
http://www.pluralsight.com/keith

0321228359P08272004

Product details

Publisher ‏ : ‎ Addison-Wesley Professional; 1st edition (September 15, 2004)
Language ‏ : ‎ English
Paperback ‏ : ‎ 392 pages
ISBN-10 ‏ : ‎ 0321228359
ISBN-13 ‏ : ‎ 978-0321228352
Item Weight ‏ : ‎ 1.7 pounds
Dimensions ‏ : ‎ 6.75 x 1 x 9 inches

Best Sellers Rank: #4,742,386 in Books (See Top 100 in Books)
- #513 in CompTIA Certification Guides
- #899 in Microsoft .NET
- #1,744 in Microsoft OS Guides

Customer Reviews:
3.6 21 ratings

About the author

Follow authors to get new release updates, plus improved recommendations.

Keith Brown

Brief content visible, double tap to read full content.

Full content visible, double tap to read brief content.

Discover more of the author’s books, see similar authors, read author blogs and more

Customer reviews

3.6 out of 5

21 global ratings

How customer reviews and ratings work

Sort reviews by

Top reviews from the United States

There was a problem filtering reviews right now. Please try again later.

Very good book for tips and approaches

Reviewed in the United States on August 30, 2005

Verified Purchase

Brown's book isn't so much about specific coding techniques, although there are a fair number of those within. You won't find specifics on .NET's code access security, or issues around cross-site scripting. You'll need to look to Howard and LeBlanc's <cite>Writing Secure Code</cite> for code specifics.

Rather, this book is more about approaches to secure development on Windows. In the book you'll find tips on how to develop software using a non-Administrator account, great fundamentals like discussion on IPSEC, Kerberos, policies, etc.

There's also great, detailed discussion of things like COM(+)/Enterprise services, authority and identity, impersonation, and a brief section on threat analysis.

You'll still need another book with details on implementation (see Howard, LeBlanc), but this book really is a great addition to a security-concious developer's bookshelf.

2 people found this helpful

A disconnected mess

Reviewed in the United States on November 21, 2006

As a degreed, professional software developer, I found the book very weak in presenting a good explanation of how a programmer might make better use of Windows security.

The book is a series of 4-6 page chapters. The author constantly refers back and forth to the chapters: (item 24), (item 15) etc. There is no big picture, just page after page of alphabet soup.

I also found it annoying that the author uses 'her' instead of 'he'.

One person found this helpful

Louis L. Kudelka

Windows Security is Difficult

Reviewed in the United States on October 5, 2008

Doug B from Minneapolis "A disconnected mess" has a point. The book does jump back and forth making it difficult to put together the "big picture." As a programmer I did not get the answer to my questions but as an analyst this was a good starting point for an understanding of Windows security. Also, I wish the book were updated to cover Server 2008 and Vista. Still the book is recommended reading for all who wish to get a better understanding of Windows security.

2 people found this helpful

Very good book indeed

Reviewed in the United States on February 17, 2011

Verified Purchase

Finally a book that explains Windows security to mere mortals! It is very well written, the explanations are clear, concise and to the point. The book pieces very well together all disparate of Windows security that MSDN does not seem to care to properly explain to people who do not know the topics to start with.

The book covers Windows up to Server 2003 and is written before .Net 2.0 so it most likely needs a revision.

2 people found this helpful

Reviewed in the United States on February 22, 2014

Verified Purchase

Now a days we don't find much books like this giving insights and fundamentals.
Many programmers doesn't concentrate on the concepts present in this book. These concepts can be very important.

One person found this helpful

More like a cookbook

Reviewed in the United States on October 28, 2004

Its more like a cook book written in bunch of 4-5 page sections that describe how to do what with .Net sceurity namespaces. If you are looking for book that described windows security then get Keith's "Windows Security Programming" book.

2 people found this helpful

Osier W Tanner II

Reviewed in the United States on October 3, 2013

Verified Purchase

Loved it. Great service and speed on getting the book in on time. This was exactly what I was looking for.

One person found this helpful

An essential resource for .NET Developers

Reviewed in the United States on August 2, 2005

Full review is online here: [...]

Excerpts:

Brown's treatment of the subject is broad. You should not be under any misconception that this book will make you an expert on security (either Windows, or .NET). But, it will help you remember the issues you need to remember in order to produce software that does not increase the attack surface of your customer's machines. That's the strength of this book. You will not need every recommendation for every application you develop, but you will need to remind yourself of these issues, and make sure you have thought about those issues.

"The .NET Developer's Guide to Windows Security" should be required reading for every .NET developer. It's already earned a place of prominence on my bookshelf. I browse the table of contents repeatedly during development. It reminds me of the issues I need to consider when I make important design decisions.

4 people found this helpful

Get to Know Us

Make Money with Us

Amazon Payment Products

Let Us Help You

English $USD - U.S. Dollar United States

© 1996-2024, Amazon.com, Inc. or its affiliates