Return to HomePage

---

ASP.NET 2.0 Internet Security Reference Implementation Home

Overview

The ASP.NET 2.0 Internet Security Reference Implementation is designed to illustrate patterns & practices best practices as they apply to a specific ASP.NET development and deployment scenario. This particular implementation, and associated guidance, is focused on an application that is internet facing, uses forms authentication connected to SQL and stores roles in SQL.

The reference implementation package contains both source code and two guidance documents.

1. The first is a scenario and solution document. The goal is to illustrate p&p best practices as they apply to the scenario, but not necessarily to the specific code we've written.
2. The second is the reference implementation document. The goal is to pin the guidance directly to the sample application instance.

The documents are companions, the first outlines guidance for the general scenario – the second goes deeper and pins it to the reference application, describing implementation decisions and giving implementation details along the way.

Usage Scenarios

* You can browse the solution and scenario doc to see key security design and implementation decision that apply to the internet facing, forms authentication scenario.
* You can browse the reference implementation doc to learn about key security design and implementation decisions in the context of a real sample application
* You can browse the reference implementation source code to see security best practices in a full blown sample application.

Download

Go to the Got Dot Net download site to get the Reference Implementation packages:
* ASPNET v2 Internet Security Reference Imp.zip
* ASPNET v2 Internet Security Reference Imp Doc.zip
* Solution - Forms Auth to SQL, Roles in SQL Doc.zip

What's Included

The download site contains the following files:
* VS 2005 Solution and Code (ASPNET v2 Internet Security Reference Imp.zip) - Contains an MSI installer that includes the Visual Studio 2005 solution for the reference implementation, the application source code, the reference implementation document and the scenario and solution document.
* Reference Implemenation Document (ASPNET v2 Internet Security Reference Imp Doc.zip)- is the reference implementation walkthrough document containing implementation details and key decisions we made along the way.
* Scenarion and Solution Document (Solution - Forms Auth to SQL, Roles in SQL Doc.zip)- is the more general scenario and solution document containing key decisions that apply to all applications in this scenario.

Relationship to Pet Shop 4

The reference implemenation uses Pet Shop 4 as a basis, making the changes necessary to bring it in line with patterns & practices security best practices. While Pet Shop 4 was built to demonstrate the following
* Migrating code from .NET 1.1 to .NET 2.0
* Techniques for code reducting in an enterprise application
* Best practices in enterprise application architecture
It was not designed to demonstrate all of the patterns & practices security best practices. The ASP.NET 2.0 Security Reference Implementation builds upon the foundation provided by Pet Shop 4 to demonstrate security best practices applied to an ASP.NET internet facing application.

Feedback

If you have feedback on the Reference Implementation, please post it to the forums on the Got Dot Net Reference Implementation project site

Links

* Reference Solution Document Online
* Got Dot Net Reference Implementation project site
* Pet Shop 4 Page

---

Return to HomePage