Table of Content
BackCover
Expert Web Services Security in the .NET Platform
Foreword
Acknowledgments
Introduction
Chapter 1: Web Services and XML Standards
Introduction to Web Services
Securing Web Services
Summary
Chapter 2: Windows Security
Securing Windows 2003
Securing Your Web Services in IIS 6.0
IIS Authentication
IIS Access Control
IIS Encryption
Certificates with IIS
Auditing Your Server
Summary
Chapter 3: ASP.NET Architectural Overview
Summary
Chapter 4: Security Tools and Tips
Mask Your Server
Hide Your Technology
Updating Your Web Site
Logging Always Trumps Performance
Monitoring Tools
Summary
Chapter 5: .NET Cryptography
Cryptography in .NET
System.Security.Cryptography
CryptoAPI
Summary
Chapter 6: Web Services and Integrated Windows Security
ASP.NET Security and Windows
Windows Authentication
Custom Security with SOAP Headers
ASP.NET URL Authorization
Logging User Access
Summary
Chapter 7: Web Services over SSL
SSL and IIS
Chapter 8: WS-Security with the WSE
The WS-Security Specification
Security Tokens
The UsernameToken
Kerberos Tickets
X.509 Certificates
Getting Started with the WSE
UsernameToken Authentication
Kerberos Authentication
X.509 Authentication
Policy-Based Configuration
Summary
Chapter 9: Using SQL Server with ASP.NET
SQL Popularity
ADO.NET SQL Object Model
Authentication
ADO.NET Connection Strings
ASP.NET Impersonation Modes
Securing Session States
Coding to Avoid Common Attacks
Putting It All Together
Summary
Chapter 10: .NET IL Obfuscation and Intellectual Property
Intellectual Property
Nomenclature
Disassembling Assemblies
Decompiling Assemblies
Obfuscating Code
Summary
Index
Glossary - A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
R
S
T
U
V
W
X
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
List of Figures
List of Tables
List of Examples
List of Sidebars