Microsoft Silverlight and Code Security

Users and administrators are always concerned when it comes to downloading executable code that comes from the Internet. In which way is Silverlight better than ActiveX and at least as secure as Flash? How can Silverlight’s runtime prevent risky code from executing? How can it recognize that now it is enabled to execute a large share of the .NET Framework classes? Let’s explore the security model of Silverlight.

The Security Model

Silverlight’s CLR uses an innovative security model that is a sort of simplified version of the security model employed for the .NET Framework. Silverlight doesn’t use the Code Access Security (CAS) model of .NET; instead, it opts for an adapted version of the concept of code transparency ...

Get Microsoft® ASP.NET and AJAX: Architecting Web Applications now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.