.NET Security and Cryptography

The .NET Framework and the CLR

The .NET Framework and Common Language Runtime (CLR) enable programmers to deal effectively with each of the important security issues described in this chapter. For example, information theft can be avoided by implementing appropriate cryptographic features into your applications. Malicious code can be stifled by defensive programming practices and by configuring appropriate user-based security and Code Access Security (CAS) features. Buffer overrun attacks become virtually impossible to implement given the secure and rigorously managed runtime environment provided by the .NET platform. Bugs resulting from buffer overruns and improper type casting are virtually eliminated by managed code and CLR runtime checks. ...