Building Secure Client Applications in Windows Longhorn

Microsoft has long been promoting the idea of users running with least privilege as security hygiene. Since Windows 2000, there has been the Least-privilege User Account (LUA) initiative, aimed at getting developers to make their application well behaved, and only require special privileges where absolutely necessary. In "Longhorn" Microsoft is providing a number of technologies that make this easier and more secure. Learn how the managed code world is changing to provide a useful but secure environment for running untrusted code, how the operating system will provide an isolation environment for the full range of trusted code (managed and unmanaged) regardless of whether the application requires special privilege or not. Among the topics to be covered are: a brief overview of Code Access Security (CAS); the Secure Execution Environment (SEE); writing untrusted code that is more than 'dancing hippos'; LUA/Protected Administrator (PA), writing and deploying applications regardless of whether they require special privilege or not.

Read More...

---