AspDotNetAtoms.com provides daily updates on ASP.NET Tutorials, Programming Resources, .NET Articles, Authors and more.

Categories

Recent Posts

ASP.NET Security [Part I] : Joydip Kanjilal

Saturday, September 13 2008

Security is one of the most important concerns in application software development. Building a robust security model is one of the most important factors that drive the success of application software. As far as security in ASP.NET is concerned, three terms come into my mind, i.e., Authentication, Authorization and Impersonation. Put simply, authentication authenticates the user’s credentials and authorization relates to the resources that an authenticated user has access to. This article is the first in a series of articles on ASP.NET security and discusses these concepts and their applicability. Let us start our discussion with a brief outline on the sequence of events are as far as authentication and authorization are concerned when a new request comes in. When a new request arrives at IIS, it first checks the validity of the incoming request. If the authentication mode is anonymous (default) then the request is authenticated automatically. But if the authentication mode is overridden in the web.config file settings, IIS performs the specified authentication check before the request is passed on to ASP.NET...

Read More:
ASP.NET Security [Part I] : Joydip Kanjilal
Also See:
How to make any WebService Method "Timeout"-able : Peter Bromberg
ASP.NET XmlProvider Library :
Support Voice: Using Virtual Path Providers : Parag Agarwal
Designing Application Using Test Driven Development Part 2 : Mohammad Azam

Post your comment

Comment