Code access security

Today, highly connected computer systems are often exposed to a variety of unpredictable sources.CodeUnder. code can be attached to an email, included in a document, or downloaded over the Internet. unfortunately, many computer users have experienced first-hand malicious dynamic code, including viruses and worms, which can destroy data and consume time and money.

 

Most security mechanisms grant access to restricted resources (usually directories and files) based on user logon creden. (usually passwords ). however, this method does not work in some situations: users can obtain code sources in multiple ways, which is far from reliable. The code can contain bugs or weaknesses, so that it can be attacked by malicious code; sometimes the code will do something that the user does not know the code. therefore, computer systems can be damaged when trusted users run malware or error software, and private data can be leaked. most operating system security mechanisms require that each piece of code be fully trusted to run, unless it may be a script on a webpage. therefore, a widely used security mechanism is required to allow code in one computer system to be executed on another protected system, even if there is no trust relationship between systems.

 

To help protect computer systems from malicious removable code and allow code from unknown sources to run on protected systems, it also helps trusted code be blocked by deliberate and unintentional security compromise ,. net Framework providesCode access securitySecurity mechanism. code access security also enhances the classification of Code Trust, which reduces the amount of code to be written to run code with full trust. code access security can reduce the possibility that your code is misused, used by malicious code, or used by code containing errors. it can reduce your responsibilities because you can specify the operations that your code is allowed to perform and the operations that your code is not allowed to perform. code access security can help minimize the potential damages caused by security vulnerabilities in your code.

 

All managed code targeting the Common Language Runtime will benefit from code access security, even if the Code does not call a line of code access security. However, all applicationsProgramCode access should be requested, as described in code access security basics.

 

Translated from:

. NET Framework developer's Guide-code access security

Http://msdn.microsoft.com/en-us/library/930b76w0%28VS.71%29.aspx