Let's move to a java virtual machine and code Access security I'm talking about the net framework
both technologies allow granting permissions to programs as we already know.
A process doesn't define a security boundary a solution that can effectively replace this is the code
Access security mechanism
with virtual environments enable granting permissions to programs that are independent of the user permissions.
This means that regardless of the user account use to launch a program if loading data from the main
folder on the C. disk is disabled for the program it will throw up an exception an administrator or
program developer Grant's code permissions without regard to the user account permissions used to run
the program.
The mechanisms of course are overlapping to run a program you would need to have appropriate privileges
but once a program is launched it executes its own additional permissions.
How were they created in Windows
with the dot net framework or programs permissions set as a sign according to the level of trust that
it's granted.
We need to identify a program read its label.
Next we need to authorize all operations executed by the program in attempt to execute a disallowed
operation will result in the error.
You can see below.
Code Access security is treated as a security boundary.
Microsoft reacts to all attempts to cross the boundary by issuing an appropriate critical security update.
The mechanism for gaining code permissions is complicated to simplify it.
Permissions are created in several ways.
First a program can belong to a zone.
It can for example belong to the Internet or Internet zone which means that it can be downloaded from
a LAN or external network or program can also belong to your local computer zome.
It will then be granted a different trust level.
The levels are governed by the site of origin of a launched program beyond that will also have credentials
or a program signature.
These two mechanisms will overlap to build a result and program permissions list.
If this mechanism is to be used to its full potential software developers must request granting appropriate
permissions to a program either declaratively or procedurally the top listening in the slide above shows
a demand for granting permissions to read a file.
The below listing shows the explicit specification for a program to not execute some operations
the effectiveness of protecting that rating system is underpinned by risk management
to manage risks in a purposeful manner.
You have to be aware of the threats that you may face and know the inbuilt system security technologies
basic concept that relates to classifying the technologies is a security boundary a security boundary
allows you to control data flow between a code and another code.
There's fewer boundaries in the system than it could seem.
One boundary is set by the computer itself.
The others are defined by a system more by the user role over the past 10 years.
Only one new boundary has emerged a boundary set by a virtual machine or a Java framework.
Within the domain set by a boundary.
Malicious processes are not controlled.
It's vital to plan your security solutions.
With this in mind
thank you.