Yet another article published in December 2004, the architecture-focused continuation of the 15 Seconds article mentioned in my last blog entry. This one talks about architecture for ASP.NET applications to run with least privilege, design and allocate components, and handle runtime security elevation as needed while starving the application runtime of privileges to prevent hackers from getting in. Part 1 focuses on a solution without allocating other processes with Enterprise Services.

http://theserverside.net/articles/showarticle.tss?id=SandboxingComponents

Part 2 is being written as I write this...well, not exactly...but after I write this I'll get back to it...