Improving Web Services Security

Free eBook “Improving Web Services Security: Scenarios and Implementation Guidance for WCF” from Microsoft patterns & practices Developer Center. This guide shows you how to make the most of WCF (Windows Communication Foundation).

Book Description

This guide is focused on key security aspects of WCF. The guide addresses security across the three primary physical tiers: the client, remote application server, and database server. Clients include Microsoft Windows Forms, ASP.NET, and WCF.

Using end-to-end application scenarios, this guide shows you how to design and implement authentication and authorization in WCF. You will learn how to improve the security of your WCF services through prescriptive guidance including guidelines, a Q&A, practices at a glance, and step-by-step how to articles. The guide is the result of a collaborative effort between patterns & practices, WCF team members, and industry experts.

Table of Contents

• Security Fundamentals for Web Services
• Threats and Countermeasures for Web Services
• Security Design Guidelines for Web Services
• WCF Security Fundamentals
• Authentication, Authorization, and Identities in WCF
• Impersonation and Delegation in WCF
• Message and Transport Security
• Bindings
• Intranet – Web to Remote WCF Using Transport Security (Original Caller, TCP)
• Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem, HTTP)
• Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem, TCP)
• Intranet – Windows Forms to Remote WCF Using Transport Security (Original Caller, TCP)
• Internet – WCF and ASMX Client to Remote WCF Using Transport Security (Trusted Subsystem, HTTP)
• Internet – Web to Remote WCF Using Transport Security (Trusted Subsystem, TCP)
• Internet – Windows Forms Client to Remote WCF Using Message Security (Original Caller, HTTP)

Download Free PDF / Read Online