1. Securing Applications built on .NET Framework Protecting .NET Applications especially on the internet is quite a job that needs a lot of understanding and in-depth knowledge about the .NET platform. Building .NET Applications in a step wise manner and taking care of the security needs will be more than enough for a developer who seeks to keep his code away from the access of malicious users on the web. While working on the security of an application one needs to proceed on a zone-by-zone basis as the .NET Framework has a tendency of assigning trust levels to managed assemblies. The assignments are based on the basis of the zone where the assemblies run although it forms a small part yet it is crucial. The standard zones being My Computer, Local Intranet, Internet, Trusted Sites, and Untrusted Sites. It’s in your hands to increase or decrease the trust level that is associated with each zone. There are many ways that are provided by the .NET Framework to determine the level of trust that one needs to grant to an assembly. Although the coder always has an option of making exceptions to these rules. Thus one can increase and decrease the level of trust for assemblies depending upon the requirement of the application that is being developed. If you have customized the trust levels to a particular level and later on realize that this does not deliver the results that are really required by the code; it is always possible for one to return back to the default trust levels thus giving the developer all options to make good if something ever goes wrong.

2. One needs to upgrade and audit the security of the .net connected applications whenever there is any upgrade, testing or troubleshooting as the configuration of the production systems may undergo a change unintentionally. As system security degrades with time thus it is important to perform audit on the security of the .NET Applications from time to time. NTFS file permissions along with packet filtering, firewalls, restrictive file permissions, the URL Scan ISAPI filter, and carefully controlled SQL Server privileges are some of the measures that will go a long way in increasing the protection of the .NET Applications that’s exposed to all the World Wide Web. If the development is done in a planned and phased manner its not really a hard job to keep your .NET Applications safe and sound with the least number of errors cropping up in the future. You just need to know and implement your basics properly. For more details on Code Protection technology, .net Obfuscator , .net Code Security and .net Code Protection feel free to visit us at http://www.secureteam.net Article Source: http://netobfuscator.wordpress.com/2011/12/26/securing-applications-built-on-net-framework/