Securing your Data Layer in a C# Application

前端 未结 12 1851
执念已碎
执念已碎 2020-12-23 12:47

I was thinking about how to secure the Data Layer in a C# Application, the layer could in this case be either a LINQ to SQL Model Diagram stored with the Application itself

12条回答
  •  粉色の甜心
    2020-12-23 13:37

    It's difficult to provide a precise answer because I'm not sure what specific issues you are trying to solve and which is the key driver for securing the system.
    However, in the past I have used WinForms -> WebService secure communication by utilising WSE
    We used X509 certificates and WS-Security. This has the distinct advantage of providing End To End Security rather than relying on standard SSL transport.
    However this in of itself doesn't solve issues like user authentication per se, in that case Mitch Wheat's answer seems a good solution.
    However, your user authentication model will depend on whether this is a public distributed app, whether the number of users of the tool is large or small etc.
    For small numbers of users, or where cost is not an issue, you could implement RSA SecurID authentication by setting up a RADIUS server or such like. This has the advantage in that each RSA key is unique and tied to that user ( though you can never stop a user giving out their credentials and PIN )

    HTH

提交回复
热议问题