基于.NET平台的WEB解决方案的安全机制

安全是Web应用的核心。许多Web应用基于Windows的IIS服务，其安全控制全面集成于Windows安全体系，提供了包括多种措施在内的安全机制。然而，IIS安全机制过于简单，因此，NET平台对基于其ASP.NET环境开发的Web应用引入了更多的安全措施。ASP.NET安全机制与IIS安全机制协同工作，大大提高了IIS的安全性，更好地解决了Web应用的安全问题。开发人员可以根据不同的安全需求，按需定制，构造多层次的安全解决方案。

A STUDY OF SECURITY MECHANISMS FOR WEB APPLICATIONS BASED ON . NET FRAMEWORK

Security is vital to any Web applications. Many Web applications are based on IIS in Windows, which provides security mechanisms all-sidedly including a lot of security measures for the Web sites. IIS is fully integrated into Windows security,'however, IIS security mechanism is too generic; therefore, . NET framework imports more security measures for the Web applications developed in ASP. NET environment. ASP. NET security works in conjunction with IIS security but extends it,so that it's convenient to developers to create more security measures at all levels and customize more features according to different demands for security.