MCPD 70-519 Exam Ref: Designing and Developing Web Applications Using Microsoft® .NET Framework 4

Chapter 4. Designing Security Architecture and Implementation

All network applications are under constant attack, and those attacks are becoming more effective every day. Although security is never absolute, you can reduce the risk of security being compromised by following best practices when designing an application’s architecture.

This objective domain covers how to limit an application’s privileges to reduce the cost of a successful attack, how to design authentication and authorization to restrict access to different features of an application, and how to help protect an application from common types of attacks.

Objectives in this chapter:

• Objective 4.1: Plan for Operational Security

• Objective 4.2: Design an Authentication and Authorization Model ...