asp.net 中认证安全特征评述[外文翻译].doc

约17页DOC格式手机打开展开

asp.net 中认证安全特征评述[外文翻译],asp.net 中认证安全特征评述[外文翻译]包括英文原文和中文翻译asp. net 中认证安全特征评述narcisio tumushabe ,谭冠正(音译)(中南大学计算机科学与信息技术学院, 湖南长沙410083)摘 要: 讨论了服务应用时支持安全的asp. net 认证特征,微软的互联网信息服务( iis) 和a...
编号:16-100732大小:136.50K
分类: 论文>外文翻译

内容介绍

此文档由会员 果酸 发布

ASP.NET 中认证安全特征评述[外文翻译]



包括英文原文和中文翻译



ASP. NET 中认证安全特征评述


Narcisio Tumushabe ,谭冠正(音译)

(中南大学计算机科学与信息技术学院, 湖南长沙410083)


摘 要: 讨论了服务应用时支持安全的ASP. NET 认证特征,微软的互联网信息服务( IIS) 和ASP.NET 提供了安全模式,使Web 开发者恰当地认证其使用者,并在应用过程中获得正确的安全之本. 三个层次的认证是基于表单的,身份证书和视窗认证. 综述文献仅限于上述三个领域.


关 键 词: 表单; 身份证书; 视窗认证

中图分类号: TP 393108  文献标识码: A   文章编号: 1000 - 1646 (2003) 03 - 0250 - 05


安全是开发人员和应用程序架构师首要关注的问题。由于不同类型的网站有不同的安全需要,开发人员需要知道需要什么程度的安全运行,并为他们的程序选择适当的安全模式。有些网站发布的信息不来自用户,而是通过搜索引擎等广泛渠道来收集。另外一些网站,可能要收集用户的敏感信息,比如信用卡号码,这些网站需要非常严格的安全措施,以避免来自外部的恶意攻击。


 




An overview of authentication security features in ASP. NET

Narcisio Tumushabe , TAN Guan-zheng

  (School of Computer Science and Information Technology , Central South University , Changsha 410083 , China)




Abstract : This article discusses the authentication feature of the ASP. NET to support security when designing a server application. Both Microsoft Internet Information Services ( IIS) and ASP. NET provide security models that will allow web developers to authenticate the your users appropriately and obtain the correct security context within the application. Three levels of authentication covered are the Formsbased , passport and windows authentications. The article literature is limited to these three areas.

Key words : Forms2based; passport ; windows authentication

CLC number : TP 393108  Document code : A   Article ID : 1000 - 1646 (2003) 03 - 0250 - 05

 Security is one of the primary concerns forboth developers and application architect s. As there are lot s of different types of websites with varying security needs , the developers need to know how the security works and choose the appropriate security model for their applications. Some websites collect no information from the users and publish the information that is available widely such as search engine. There are other sites that may need to collect sensitive information f rom their users like  credit card numbers. These websites need muchst ronger security implementation to avoid malicious  attacks f rom external entities.