Wednesday 19 February 2014

.NET Transparency Model ("Security Silo" Model) Overrules CAS as of Dot Net 4

Transparency separates code running as part of an application from code running as part of infrastructure. Transaparent code can only "do things" within the bounds of a permission set, and can't do funky things with infrastructure (running critical code etc.). This follows the principle of least privilege.

No comments: