的网络服务安全.pptVIP

从 WSE 3.0 到 WCF – Custom Security Token WSE: Security Token Manager seviceCredentials credentials = new CustomCredetials(); … Host.Description.Behaviors.Remove(typeof(ServiceCredentials)); Host.Description.Behaviors.Add(credentials); security securityTokenManagers add tokenType=“..” type=“MyToken, MyDLL” / /securityTokenManagers /security WCF: ServiceCredential / ClientCredential 第二十九页，共三十三页。 总结 ASPNET为您奠定了Xml Web Services的基础; WSE 3.0为您提供了Secure Web Services良好的开端; WCF将最终帮助您实现高效,便捷及可靠的全新的Web Services 在去年年底发行的WSE3.0, 有以下几个主要功能: Security Policy Diagnostics Tools 如果您已采用了WSE 3.0来帮助提高您的网络安全, 那么它将与即将发行的WCF兼容 ( interop ) 如果您想在WCF发行后, 由WSE 3.0上升至WCF, 那么您也将很轻松地完成这个任务 第三十页，共三十三页。 相关链接 在此次大会期间 您想更深入地了解WCF吗？您想零距离接触将要发行的WCF吗? 欢迎参加有关Windows Communication Foundation (“Indigo”)的讲座(CON210) 在此次大会之后 访问与WSE 3.0相关的网站: 访问与WSE 3.0相关的博客: Mark Fussell: Hongmei Ge: 第三十一页，共三十三页。 问与答？(QA) 第三十二页，共三十三页。 内容总结 WSE 3.0 的网络服务安全。WSE 3.0 应用较为广泛的功能块。WCF 又需要有较长的时间来完成, 至今仍未正式发行。如何用policy Wizard工具轻松地将网络安全加入到一个简单的ASMX Web Service中。出错后如何看到 stack trace:。stackTrace enabled=“true” /。怎样的WSE 3.0 App才容易和WCF相互操作呢。textMessageEncoding messageVersion=“Soap12WSAddressingAugust2004” /。message establishSecurityContext=“true” / 第三十三页，共三十三页。 Security in WSE 3.0 Hongmei Ge Con321 Software Design Engineer Microsoft Corporation Agenda Background: ASPNET-WSE -WCF Important features in WSE 3.0: security, policy, diagnostics, Tools From WSE to WCF: Interop story, Migration story Background – how to go from ASPNET to WSE, and from WSE to WCF ASPNET Web Services only supports to build connected applications. At the foundation level, it supports xml serialization, sending basic messages, as well as generating and consuming metadata. At the transport layer, it only supports http and https. .Net Framework v2.0 Web Services is compliant with WS-I Basic profile. It uses WebServicesBinding attribute. In addition to all the nice things supported by the .net framework, WSE added security at the foundation level.