.NET Framework Security

Summary

Writing secure software and knowing what mobile code to trust are difficult problems. People have made numerous attempts at solving the problem before, and all the attempts have had their shortcomings.

Historically, attempts at secure execution of mobile code has had at least one of the following problems:

• Too much necessary user expertise— Source code requires too much understanding about compilers for most users to handle. Authenticode-signed ActiveX controls require users to make trust decisions on-the-fly, which most are not properly informed to decide. These mobile code options are simply too complicated or daunting.

• Lack of user or administrator control over executed code— Executable files can really only be checked for specific ...