Microsoft® .NET Kick Start

Using Code Access Security

The zero-installation based application delivery model introduced in .NET is very useful for developing and deploying rich client applications. However, with any notion of a downloadable code comes the requirement of security; otherwise, malicious code could be downloaded and executed and pose a high security risk to the client application. In some scenarios, this is the case when ActiveX controls-based applications are downloaded in the browser. To a certain extent, the problem is partially resolved by signing the ActiveX controls using Authenticode technology. However, a more proactive approach, in some sense similar to the Java Security model, is required to better support the security requirements of downloaded ...