Provides information needed to make decisions about a user's accessibility based on either the user's identity, role membership, or both Code access security Code access security protects computer systems from malicious mobile code and allows legitimate mobile code to run safely. Mobile code comes from any source, and can be embedded and used in many environments. Common sources include email attachments, documents, and Internet downloads. Far too many users experience the effects of malicious mobile code through viruses or worms that damage or destroy data and cost time and money. Microsoft, due to the recent hacks of its systems, is beginning to understand, and maybe even appreciate, such issues.
Every week seems to breed news of yet another high-profile attack.
The .Net framework's code access security mechanism allows varying degrees of code trust, depending on the code's origin and other aspects of its identity. Code access security enforces varying levels of code trust, which minimizes the amount of code that must be fully trusted in order to run. Code access security reduces the likelihood of your code being misused by malicious code, and minimizes the damage that can result from security vulnerabilities. A server usually responds to a remote system's incoming requests by one or more handlers performing tasks such as routing, logging, and authentication. After verifying the user's identity, the server attempts to determine whether the user is authorized to access the application.