Secure Coding mailing list archives

.NET Framework Security


From: Nick Murison <nick () urgusabic net>
Date: Fri, 07 Jan 2005 14:58:31 +0000

Dear all,

As part of my MSc course in Information Security last year, I wrote my
dissertation on .NET Framework Security.  As it has now been marked, I felt I
should make it publicly available, in case anyone found it interesting or
possibly useful.

The document tries to give an overview of the security features of the .NET
Framework, both from a high level architecture point of view, as well as from
a more low level technical point of view.  Most documentation I have found
have concentrated on one or the other, often for completely different
contexts.

My hope is that my report will make developers who read it more aware of the
underlying mechanisms their code will be taking advantage of, and that it can
provide a useful case study for architects of code execution environments.

The report is available at
http://www.urgusabic.net/docs/dotnet-framework-security.pdf.  Comments are
heartily appreciated.

Regards,
-- 
Nicholas John Murison
~~~~~~~~~~~~~~~~~~~~~
http://www.urgusabic.net






Current thread: