.NET Security and Cryptography

Security Discipline

There are a couple of basic rules of thumb that should be followed when either configuring or programming security. The first is the principle of least privilege, which is primarily a conservative guideline that helps avoid unforeseen risks. The other rule of thumb is that you should try to plan ahead by establishing security policy early in the project life cycle.

Principle of Least Privilege

Many programmers recommend that you do not run a development tool such as Visual Studio .NET under administrative privileges. In situations where you temporarily need greater privileges, you can use the runas utility, which allows you to specify a username and password for an individual command line.

This is the principle of least privilege, ...