Professional ASP.NET 2.0 Security, Membership, and Role Management

Professional ASP.NET 2.0 Security, Membership, and Role Management

4.25 (12 ratings by Goodreads)
By (author) 

List price: US$39.98

Currently unavailable

Add to wishlist

AbeBooks may have this title (opens in new window).

Try AbeBooks

Description

Experienced developers who are looking to create reliably secure sites with ASP.NET 2.0 will find that "Professional ASP.NET 2.0 Security, Membership, and Role Management" covers a broad range of security features including developing in partial trust, forms authentication, and securing configuration. This book offers detailed information on every major area of ASP.NET security you'll encounter when developing Web applications. You'll see how ASP.NET 2.0 version contains many new built-in security functions compared to ASP.NET 1.x such as Membership and Role Manager, and you'll learn how you can extend or modify various features. This book begins with two chapters that walk you through the processing ASP.NET 2.0 performs during a web request and the security processing for each request, followed by a detailed explanation of ASP.NET Trust Levels. With this understanding of security in place, you can then begin working through the following chapters on configuring system security, forms authentication, and integrating ASP.NET security with classic ASP including integrating Membership and Role Manager with classic ASP.
The chapter on session state looks at the limitations of cookieless session identifiers, methods for heading off session denial of service attacks, and how session state is affected by trust level. After the chapter explaining the provider model architecture in ASP.NET 2.0 and how it is useful for writing custom security providers you go to the MembershipProvider class and configuring the two default providers in the Membership feature, SqlMembershipProvider and ActiveDirectoryMembershipProvider. You'll see how to use RoleManager to make it easy to associate users with roles and perform checks declaratively and in code and wrap up working with three providers for RoleProvider - WindowsTokenRoleProvider, SqlRoleProvider, and AuthorizationStoreRoleProvider (to work with Authorization Manager or AzMan). This book is also available as part of the 5-book "ASP.NET 2.0 Wrox Box" (ISBN: 0470117575). This 5-book set includes: "Professional ASP.NET 2.0 Special Edition" (ISBN: 0470041781); "ASP.NET 2.0 Website Programming - Problem - Design - Solution" (ISBN: 0764584642 ); "Professional ASP.NET 2.0 Security, Membership, and Role Management" (ISBN: 0764596985); "Professional ASP.NET 2.0
Server Control and Component Development" (ISBN: 0471793507); "ASP.NET 2.0 MVP Hacks and Tips" (ISBN: 0764597663); CD-ROM with more than 1000 pages of bonus chapters from 15 other '.NET 2.0 and SQL Server(TM) 2005 Wrox' books; and, DVD with 180-day trial version of Microsoft[registered] Visual Studio[registered] 2005 Professional Edition.
show more

Product details

  • Online resource | 648 pages
  • 185.4 x 228.6 x 38.1mm | 952.56g
  • John Wiley & Sons Inc
  • WROX PRESS
  • Indianapolis, IN, United States
  • English
  • 0764596985
  • 9780764596988
  • 2,224,920

Back cover copy

ASP.Net security covers a broad range of subjects. Concepts such as Web security features, developing in partial trust, forms authentication, and securing configuration - just to name a few p are all integral components to helping developers ensure reliable security. Addressing the ASP.NET security features from the developer's point of view, this book offers detailed information on very major area of ASP.NET security that you'll encounter when developing Web applications.You'll see how the 2.0 version contains many new built-in security functions, such as Membership and Role Manager, and you'll learn how you can extend or modify various features. As you work through this book, you'll gain a solid understanding of the many security features in ASP.NET 2.0.What you will learn from this bookThe security professing that is performed for each HTTP requestWhat ASP.NET trust levels are and how they work to provide secure environmentsThe new options for locking down and protecting configuration sectionsNew security features for forms authentication and session stateWays to write your own custom provider-based featuresHow to extend Membership with password histories and custom password encryptionHow to use Active Directory with the new Membership and Role Manager featuresWho this book is forThis book is for experienced developers who are looking to master the new security features of ASP.NET 2.0, as well as more advanced techniques for extending ASP.NET 2.0 security.Wrox Professional guides are planned and written by working programmers to meet the real-world needs of programmers, developers, and IT professionals. Focused and relevant, they address the issues technology professionals face every day. They provide examples, practical solutions, and expert education in new technologies, all designed to help programmers do a better job.
show more

About Stefan Schackow

Stefan Schackow is a Program Manager on the Web Platform and Tools Team at Microsoft working on the new application services stack in Visual Studio 2005. He owns the Membership, Role Manager, Profile, Personalization and Site Navigation features in ASP.NET 2.0. He also works on features for Microsoft's ASP.NET hosting solution. He is a frequent speaker at Microsoft developer conferences. Prior to joining the ASP.NET team Stefan worked as an application development consultant in Microsoft Consulting Services (MCS) with enterprise customers for four years.
show more

Table of contents

Acknowledgments. Introduction. Chapter 1: Initial Phases of a Web Request. Chapter 2: Security Processing for Each Request. Chapter 3: A Matter of Trust. Chapter 4: Configuration System Security. Chapter 5: Forms Authentication. Chapter 6: Integrating ASP.NET Security with Classic ASP. Chapter 7: Session State. Chapter 8: Security for Pages and Compilation. Chapter 9: The Provider Model. Chapter 10: Membership. Chapter 11: SqlMembershipProvider. Chapter 12: ActiveDirectoryMembershipProvider. Chapter 13: Role Manager. Chapter 14: SqlRoleProvider. Chapter 15: AuthorizationStoreRoleProvider. Index.
show more

Rating details

12 ratings
4.25 out of 5 stars
5 50% (6)
4 25% (3)
3 25% (3)
2 0% (0)
1 0% (0)
Book ratings by Goodreads
Goodreads is the world's largest site for readers with over 50 million reviews. We're featuring millions of their reader ratings on our book pages to help you find your new favourite book. Close X