5- Mejorando la seguridad de la aplicación de la plataforma .NET usando las características de seguridad de la plataforma .NET 2.0.

12. April 2008 10:44 by Oscar.SS in Certificaciones, Desarrollo .NET  //  Tags: ,   //   Comments (0)

A- Implement code access security to improve the security of a .NET Framework application. (Refer System.Security namespace)

SecurityManager class

CodeAccessPermission class

Modify the Code Access security policy at the computer, user, and enterprise policy level by using the Code Access Security Policy tool (Caspol.exe).

PermissionSet class and NamedPermissionSet class

Standard Security interfaces

IEvidenceFactory interface

IPermission interface

 

 

B- Implement access control by using the System.Security.AccessControl classes.

DirectorySecurity class, FileSecurity class, FileSystemSecurity class, and RegistrySecurity class

AccessRule class

AuthorizationRule class and AuthorizationRuleCollection class

CommonAce class, CommonAcl class, CompoundAce class, GenericAce class, and GenericAcl class

AuditRule class

MutexSecurity class, ObjectSecurity class, and SemaphoreSecurity class


C- Implement a custom authentication scheme by using the System.Security.Authentication classes. (Refer System.Security.Authentication namespace)

May include but is not limited to: Authentication algorithms and SSL protocols



D- Encrypt, decrypt, and hash data by using the System.Security.Cryptography classes. (Refer System.Security.Cryptography namespace)

DES class and DESCryptoServiceProvider class

HashAlgorithm class

DSA class and DSACryptoServiceProvider class

SHA1 class and SHA1CryptoServiceProvider class

TripleDES and TripleDESCryptoServiceProvider class

MD5 class and MD5CryptoServiceProvider class

RSA class and RSACryptoServiceProvider class

RandomNumberGenerator class

CryptoStream class

CryptoConfig class

RC2 class and RC2CryptoServiceProvider class

AssymetricAlgorithm class

ProtectedData class and ProtectedMemory class

RijndaelManaged class and RijndaelManagedTransform class

CspParameters class

CryptoAPITransform class

Hash-based Message Authentication Code (HMAC)

HMACMD5 class

HMACRIPEMD160 class

HMACSHA1 class

HMACSHA256 class

HMACSHA384 class

HMACSHA512 class

 

 

E- Control permissions for resources by using the System.Security.Permission classes. (Refer System.Security.Permission namespace)

SecurityPermission class

PrincipalPermission class

FileIOPermission class

StrongNameIdentityPermission class

UIPermission class

UrlIdentityPermission class

PublisherIdentityPermission class

GacIdentityPermission class

FileDialogPermission class

DataProtectionPermission class

EnvironmentPermission class

IUnrestrictedPermission interface

RegistryPermission class

IsolatedStorageFilePermission class

KeyContainerPermission class

ReflectionPermission class

StorePermission class

SiteIdentityPermission class

ZoneIdentityPermission class

 

 

F- Control code privileges by using System.Security.Policy classes. (Refer System.Security.Policy namespace)

ApplicationSecurityInfo class and ApplicationSecurityManager class

ApplicationTrust class and ApplicationTrustCollection class

Evidence class and PermissionRequestEvidence class

CodeGroup class, FileCodeGroup class, FirstMatchCodeGroup class, NetCodeGroup class, and UnionCodeGroup class

Condition classes

AllMembershipCondition class

ApplicationDirectory class and ApplicationDirectoryMembershipCondition class

GacInstalled class and GacMembershipCondition class

Hash class and HashMembershipCondition class

Publisher class and PublisherMembershipCondition class

Site class and SiteMembershipCondition class

StrongName class and StrongNameMembershipCondition class

Url class and UrlMembershipConditon class

Zone class and ZoneMembershipCondition class

PolicyLevel class and PolicyStatement class

IApplicationTrustManager interface, IMembershipCondition interface, and IIdentityPermissionFactory interface


G- Access and modify identity information by using the System.Security.Principal classes. (Refer System.Security.Principal namespace)

GenericIdentity class and GenericPrincipal class

WindowsIdentity class and WindowsPrincipal class

NTAccount class and SecurityIdentifier class

IIdentity interface and IPrincipal interface

WindowsImpersonationContext class

IdentityReference class and IdentityReferenceCollection class

Recent Comments

Comment RSS

Month List