.NET 系列教程2310B_16.ppt

Module 16:Securing a Microsoft ASP.NET Web Application Overview Web Application Security Overview Working with Windows-Based Authentication Working with Forms-Based Authentication Overview of Microsoft Passport Authentication Lesson: Web Application Security Overview Authentication vs. Authorization What Are ASP.NET Authentication Methods? Multimedia: ASP.NET Authentication Methods Comparing the ASP.NET Authentication Methods What Are the IIS Authentication Mechanisms? Demonstration: Using IIS Authentication Mechanisms What Is Secure Sockets Layer? Authentication vs. Authorization Authentication Accepts credentials from a user Validates the credentials Authorization Given the authentication credentials supplied, determines the right to access a resource Can be assigned by user name or by role What Are ASP.NET Authentication Methods? Windows-based authentication Relies on the Windows operating system and IIS User requests a secure Web page and the request goes through IIS After credentials are verified by IIS, the secure Web page is returned Forms-based authentication Unauthenticated requests are redirected to an HTML form User provides credentials and submits the HTML form After credentials are verified, an authentication cookie is issued Microsoft Passport authentication Centralized authentication service that offers a single logon option Microsoft Passport is an XML Web service Multimedia: ASP.NET Authentication Methods Comparing the ASP.NET Authentication Methods What Are the IIS Authentication Mechanisms? Demonstration: Using IIS Authentication Mechanisms Right-click Mod16 and then click Properties Click Directory Security tab Click Edit Show the authentication What Is Secure Sockets Layer? SSL is a protocol used for transmitting data securely across a network. SSL secures data through: Data encryption -Ensures that the data sent is read only by a secure target server Server authentication -Ensures that data is sent to the correct server -Uses the server and c