.NET Framework Security

Chapter 11. Verification and Validation: The Backbone of .NET Framework Security

By Sebastian Lange

IN THIS CHAPTER

• Review of the Anatomy of an Assembly

• PE File Format and Metadata Validation

• IL Validation and Verification

• Code Access Security's Dependence on Validation and Verification

Assemblies are the development and deployment unit in the world of managed code. Assemblies are also what Code Access Security (CAS) is designed around; they are the unit of security configuration and enforcement. Administrable Code Access Security policy grants permissions to assemblies. The Code Access Security infrastructure, in turn, enables APIs exposing resources such as registry or file system acccess to check all calling assemblies for having been granted ...