MSDN Magazine September 2002

MSDN Magazine

Version imprimable

Envoyer

MSDN

Centres de développement

Popular Articles

Notions fondamentales de F#: Utilisez les techniques de programmation fonctionnelle dans .NET Framework

Dans cette rubrique, nous vous présentons certains des concepts qui sous-tendent le nouveau langage F#, qui combine des éléments de langages .NET fonctionnels et orientés objet. Nous vous aidons ensuite à écrire quelques programmes simples.

Ted Neward

MSDN Magazine Launch 2008

...

Chris Tavares explique comment le modèle Model View Controller de l'infrastructure ASP.NET MVC vous aide à créer des applications Web flexibles et faciles à tester.

Chris Tavares

MSDN Magazine March 2008

...

James Avery does it again with his popular list of developer tools. This time he covers the best Visual Studio add-ins available today that you can download for free.

James Avery

MSDN Magazine December 2005

...

Nous présentons ici des techniques actuelles pour la liaison de données par programmation et déclaration et l'affichage avec Windows Presentation Foundation.

Josh Smith

MSDN Magazine Juillet 2008

...

Writing a Web application with ASP.NET is unbelievably easy. So many developers don't take the time to structure their applications for great performance. In this article, the author presents 10 tips for writing high-performance Web apps. The discussion is not limited to ASP.NET applications because they are just one subset of Web applications.

Rob Howard

MSDN Magazine January 2005

...

Read more!

September 2002

Conseils relatifs à la sécurité: Les dix grandes règles de sécurité qu'un développeur doit connaître pour protéger son code

En matière de sécurité, les éventuelles sources de problèmes sont innombrables. Peut-être faites-vous confiance à tout le code qui s'exécute sur votre réseau, donnez-vous à tous les utilisateur accès à des fichiers importants, sans jamais vous soucier de vérifier si, sur votre machine, le code n'a pas été modifié. Peut-être travaillez-vous sans logiciel de protection anti-virus, sans avoir intégré à votre code les mesures de sécurité nécessaires, et peut-être accordez-vous trop de privilèges à un trop grand nombre de comptes. Il se peut même que vous utilisiez sans y prendre garde des fonctions intégrées qui facilitent les intrusions et que les ports de vos serveurs soient ouverts et sans surveillance. De toute évidence, la liste des risques éventuels est longue. Mais quels sont les problèmes les plus importants, les erreurs les plus graves que vous devez absolument éviter, sous peine de corrompre vos données et votre système ? Michael Howard et Keith Brown, experts en sécurité, vous proposent 10 règles qui vous éviteront bien des tracas. Michael Howard and Keith Brown

Security in .NET: The Security Infrastructure of the CLR Provides Evidence, Policy, Permissions, and Enforcement Services

The common language runtime of the .NET Framework has its own secure execution model that isn't bound by the limitations of the operating system it's running on. In addition, unlike the old principal-based security, the CLR enforces security policy based on where code is coming from rather than who the user is. This model, called code access security, makes sense in today's environment because so much code is installed over the Internet and even a trusted user doesn't know when that code is safe.In this article, Don Box explains how code access security works in the CLR. He discusses the kinds of evidence required by policy, how permissions are granted, and how policy is enforced by the runtime. Don Box

Security in IIS 6.0: Innovations in Internet Information Services Let You Tightly Guard Secure Data and Server Processes

Security improvements have been a top priority in the evolution of IIS. IIS 6.0, which will be part of Windows .NET Server, has improved security features and a new approach to server configuration. New security-related tools for IIS, including IIS LockDown, make securing your server against attack easier than ever. The author explains how and why you can shut down services with IIS LockDown. He discusses limiting port access with TCP/IP filtering, controlling how files are served with extension mapping, what's new for Secure Sockets Layer, the use of URLScan, and more. Wayne Berry

Passport Secure Sign-In: Provide Your Users with Secure Authentication Capabilities Using Microsoft .NET Passport

Secure sign-in, a new feature in version 2.0 of the .NET Passport single sign-in and profile service, is a functionality that will be especially useful for sites containing confidential information or anywhere security is a primary concern. Such sites include banks, medical sites, and so on. Secure sign-in is as safe as any SSL-based Web site login used today and provides a way to virtually eliminate vulnerability to replay and dictionary attacks.This article explains secure sign-in and demonstrates how you can implement this feature with very little effort in either ASP using the Passport.Manager COM object or in ASP.NET using the .NET class PassportIdentity. Michael Kogotkov-Lisin

HTTP Pipelines: Securely Implement Request Processing, Filtering, and Content Redirection with HTTP Pipelines in ASP.NET

ASP.NET is a flexible and extensible framework for server-side HTTP programming. While most people think of ASP.NET in terms of pages served, there is a lower-level infrastructure sitting beneath this page model. The underlying plumbing is based on a pipeline of app, module, and handler objects. Understanding how this pipeline works is key if you want to get the most out of ASP.NET as an HTTP server platform, while making your process more efficient, and keeping your server secure. This article introduces the architecture of the pipeline and shows how you can use it to add sophisticated functionality to an ASP.NET-based app. Tim Ewald and Keith Brown

Tamper-Resistant Apps: Cryptographic Hash Algorithms Let You Detect Malicious Code in ASP.NET

Cryptographic hash algorithms produce fixed-length sequences based on input of arbitrary length. A given input always produces the same output, called a hash code. Using these algorithms, you can compute and validate hash codes to ensure that code running on your machine has not been tampered with or otherwise changed. ASP.NET provides a software mechanism for validating hash code fingerprints for every page requested by a client. In this article, the author shows how to use hash codes with ASP.NET applications to detect tampering and prevent malicious code from running when tampering is detected. Jason Coombs

(246 KB)

Columns

Editor's Note: Start Your Own Security Push Earlier this year, Bill Gates outlined a comprehensive vision for trustworthy computing. Simply put, to achieve trustworthy computing developers must pay attention to security and reliability—the two biggest issues facing the world of computing today.	New Stuff: Resources for Your Developer Toolbox ePresence Inc. and OpenNetwork Technologies, an identity management security company, recently announced a partnership to deliver directory-based security management solutions utilizing Microsoft® Active Directory® as the identity store and Microsoft . Theresa W. Carey	Web Q&A: Scripting Security Edited by Nancy Michell
XML Files: WS-Security, WebMethods, Generating ASP.NET Web Service Classes Aaron Skonnard	Cutting Edge: Using an Eval Function in Web Services Web Services are often presented as the perfect tool for pro-grammers. They're interoperable, based on open standards such as SOAP and WSDL, and are fully integrated with the Microsoft® . NET platform. Dino Esposito	Advanced Basics: Reducing Memory Footprints, Gathering Process Info with MSDNMagProcessMonitor Ken Spencer
.NET: Run-time Serialization, Part 3 This is the third part of my three-part series on serialization. In part one, I showed how to serialize and deserialize objects. I also showed how to define types that allow instances of themselves to be serialized. Jeffrey Richter	C++ Q&A: Typename, Disabling Keys in Windows XP with TrapKeys Paul DiLascia	Resource File: Skills Development Two Microsoft Web sites have been created to assist developers in writing secure code using the latest technology.