Room: Theater 10:00am
Presented by:
Rick G. GaribayThere are multiple options for authenticating and authorizing users on the Microsoft .NET platform and choosing the right security model for your application can prove to be a daunting task.
This session will take an in-depth look at the various options available for addressing authentication, authorization and message integrity in ASP.NET User and Web Services. A detailed discussion of the discrete differences between the various options will provide the audience with the ability to pick the right security model for a given scenario.
A focus on successfuly implementing the trusted subsystem model in an intranet scenario built on Microsoft Internet Information Services (IIS) 6.0 will provide the audience with a solid understanding of this model and potential pitfalls to avoid in its implementation.
Session Outline:
Introduction
Foundations for Security Architecture
Security & Deployment Models
Authentication
Authorization
Secure Communication
Implementing Trusted Subsystem Model within an Intranet
ASP.NET Security Matrices