.NET Framework Security

Chapter 4. User- and Code-Identity–Based Security: Two Complementary Security Paradigms

By Sebastian Lange

IN THIS CHAPTER

• A Little Anatomy of Computer Security Systems

• A Review of User-Identity–Based Security

• Entering a New Paradigm: Code-Identity–Based Security

• How User- and Code-Identity–Based Security Systems Complement Each Other

Security is a core component of the .NET Framework infrastructure. All managed code run on the .NET Framework Common Language Runtime (CLR) is subject to the scrutiny and restrictions that the Code Access Security (CAS) system imposes. However, this security system differs in its fundamental design from many other security systems, such as the Windows Security system. Code Access Security is based on code identity, ...