Designing Web-Based Applications For Windows 2000 - With Cd-Rom - Lévy, Marc

. .

Résumé :
Learn how to use Windows 2000 security Matures to protect your Web applications and data.

Windows 2000 provides a host of innovative services to satisfy the most demanding security needs. DESIGNING SECURE WEB-BASED APPLICATIONS FOR MICROSOFT WINDOWS 2000 provides an authoritative, end-to-end view of all the major Windows 2000 security services. This book gives you a solid foundation in Windows 2000, Microsoft Internet Explorer, Internet Information Services, Microsoft SQL Server, and COM+ security concepts. It explains the key software design considerations for various categories and levels of security, and shows how isolated security islands interact. It also explains core security issues such as risk analysis, threats, authentication, authorization, and privacy, and it shows how you can mitigate risks by applying the appropriate security to your environment and applications. The author uses Web services, certificates, components, and database access to build a Web-based security solution (included on CD-ROM) to show how Windows 2000 security features work in tandem to protect applications and data.

Packed with the latest Web security insights, this book covers topics such as :
- The philosophy and architecture of security systems : The importance of security to your assets; why security is so hard to implement and maintain; common examples of security threats and countermeasures; and a detailed process for building secure Web applications using a real-world Web security scenario
- Technologies, options, and trade-offs : An overview of security services in Windows 2000, SQL Server, Internet Explorer, Internet Information Services, and COM+; and practical trade-offs in developing systems to counter security threats
- Practical security system development : How to build, test, and troubleshoot a security solution for a Web application
- Reference details : Security administration with Active Directory Service Interfaces (ADSI), Windows Management Instrumentation (WMI), and COM+; and Kerberos authentication, cryptography, and certificates in Windows 2000

Biographie:
Michael Howard is a Security Program Manager in the Windows 2000 team at Microsoft Corporation, focusing on Internet security issues and secure design best practices. Previously, he was the Web Infrastructure Security Program Manager, working on next-generation Web technology, the Security Program Manager for Internet Information Services 5, and a security consultant with Microsoft Consulting Services. Marc Levy is a Program Manager in the Microsoft BizTalk Server group and was the Program Manager for Microsoft Transaction Server and COM+ security. Richard Waymire, the Enterprise Program Manager for Microsoft SQL Server, is in charge of overall security for Microsoft SQL Server.

Sommaire:
INTRODUCTION AND DESIGN

• Security 101
• A Process for Building Secure Web Applications

• Windows 2000 Security Overview
• Internet Explorer Security Overview
• Internet Information Services Security Overview
• SQL Server Security Overview
• COM+ Security Overview
• Practical Authentication and Authorization
• Practical Privacy, Integrity, Auditing, and Nonrepudiation
• IN PRACTICE
• Building a Secure Solution
• Troubleshooting Secure Solutions
• Securing Against Attack
• REFERENCE
• Security Administration with ADSI, WMI, and COM+
• An Introduction to Kerberos Authentication in Windows 2000
• An Introduction to Cryptography and Certificates in Windows 2000