Improving Web Application Security: Threats and Countermeasures

For more information, see the following resources:

• For a printable checklist, see "Checklist: Securing Remoting" in the "Checklists" section of this guide.

• For information on how to host a remoted component in a Windows service, see "How To: Host a Remote Object in a Windows Service" in the "How To" section of "Microsoft patterns & practices Volume I, Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication " at http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT15.asp .

• For more information about how to create a custom authentication solution that uses SSPI, see MSDN article, ".NET Remoting Security Solution, Part 1: Microsoft.Samples.Security.SSPI Assembly," at http://msdn.microsoft.com/library/en-us/dndotnet/html/remsspi.asp .

  Note	The implementation in this article is a sample and not a product tested and supported by Microsoft.