Pro ASP.NET 4 in VB 2010, Third Edition

Part IV. Security

Devising a proper security strategy is a key part of any distributed application, particularly a large-scale web application that's exposed over the public Internet. In this book, you'll find no less than eight chapters that cover ASP.NET security features.

In Chapter 19, you'll begin with a high-level overview of three security fundamentals: authentication, authorization, and confidentiality. Once you have this perspective in mind, you're ready to consider ASP.NET's two key systems for authenticating users: forms authentication (Chapter 20), which provides a simple yet flexible framework for securing a public website, and Windows authentication (Chapter 22), which uses existing Windows accounts to authenticate users and is most ...