.NET Framework Security

If All Else Fails

Unfortunately, your code is likely to ship with security weaknesses. Like eliminating all bugs from a complex product, finding all the security flaws is a gargantuan task, and mistakes are likely to be made.

Proper design can help mitigate these potential disasters; code can be sectioned off so that a breach in one area doesn't compromise the entire system. But it's always wise to have something up your sleeve if the unthinkable happens. If a security vulnerability is found and exploited and your code is out in the field, you'll need to offer a fix very quickly indeed.

This can be problematic: Finding the vulnerability, designing, implementing, and testing a fix can certainly take more than a few hours. In this situation, it ...