Some Final Thoughts

Some Final Thoughts

The .NET Framework and the common language runtime offer solutions to numerous security problems. Most notably, the managed environment helps mitigate buffer overruns in user-written applications and provides code access security to help solve the trusted, semitrusted, and untrusted code dilemma. However, this does not mean you can be complacent. Remember that your code will be attacked, and you need to code defensively.

Much of the advice given in this book applies to managed applications also: don t store secrets in Web pages and code, do run your applications with least privilege by requiring only a limited set of permissions, and be careful when making security decisions based on the name of something.