SlideShare a Scribd company logo
Getting started with
Windows Communication Foundation &
its Security
By,
Ratan Sharma
ratans@mindfiresolutions.com
Agenda
→ History of Web Services
→ Service Orientation
→ Introduction to WCF
→ WCF Architecture
→ End points
→ Demo
→ WCF Security
→ Security support for different bindings
→ Security modes
→ Demo
COM
Component object model
DCOM
Distributed COM
.Net Remoting
COM +
Mechanism for communicating between applications and components
running on the Windows platform for same computer.
Mechanism for communicating between applications and components
running on other computers over a network.
Integration with Microsoft Transaction Server so applications could
group operations on components together into transactions.
A client application could access a remote object hosted by a remote
server application as if it were running locally, inside the client
application
Mechanism for communicating between applications and components
running on the Windows platform for same computer.
Inter Process Communication Technologies
→ Web Service
BALANCE between push and pull.. (Common Data format & Common Protocol)
Choice: How do you want to get info?
How do you want to deliver it?
What is WCF ?
Windows Communication Foundation (WCF) is a technology
for developing applications based on service-oriented
architecture (SOA).
The four tenets of service orientation
Service compatibility is determined based on policyService compatibility is determined based on policy
Services share schema and contract, not classServices share schema and contract, not class
Services are AutonomousServices are Autonomous
Boundaries are ExplicitBoundaries are Explicit
Why WCF ??
→ Multiple protocol support
→ Full duplex communication
→ Different hosting environment
→ Different serializer option
→ Messages can be queued using persistence queuing. As a
result, no delays occur, even under high traffic conditions.
WCF
.Net
Remotin
g
Enterpris
e
Services
Messagin
g
ASMX
WSE
Interop with
Other platforms
WS* Protocol
support
Message oriented
programming
Extensibility
location
transparency
Attribute
based
programming
WCF Architecture
How to reach your service ?
Address : URI of the WCF service
- Transport Scheme
-Server location
- Port
- Path
Binding : Defines how the WCF service
handles the request
- BasicHttpBinding, NettcpBinding etc
Contract : Defines what public data and
interfaces the WCF service
provides to the client.
- Service contract, Data Contract, Fault
Contract, Message Contract
End Point
Instance Management
New Instance
New Instance
New Instance
Instance
Per-Call
Singleton
Per-Session
Request
Instance 1
Instance 2
Instance 3
Client
Client 1
Client 2
Client 3
Request
Request
Client 1
Client 2
Client 3
Demo
WCF
Security
Authorization
IntegrityConfidentiality
Authentication
Security Mode
5 possible security modes
→ None
→ Transport
→ Message
→ Both (only msmq support this)
→ TransportWithMessageCredential
→ TransportCredentialOnly
Bindings supporting Transport, Message and mixed mode
Binding Transport Mode? Message Mode? Mixed Mode?
BasicHttpBinding Yes Yes Yes
WSHttpBinding Yes Yes Yes
WSDualHttpBinding No Yes No
NetTcpBinding Yes Yes Yes
NetNamedPipeBinding Yes No No
NetMsmqBinding Yes Yes No
MsmqIntegrationBinding Yes No No
wsFederationHttpBinding No Yes Yes
Message over a Channel
Message
Message
Message
Message
$%$^$^
$%#$%
W$#@%#
$^$%^
$%^^
@$#%
$%^^
@$#%
WCF Client
WCF Service
EndPoint Message
Message
WCF Client
WCF Client
WCF Client
WCF Client
WCF Service
EndPoint
WCF Service
EndPoint
WCF Service
EndPoint
WCF Service
EndPoint
WCF Service
EndPoint
WCF Service
EndPoint
Demo
Questions ?
References
→ Codeplex.com
→ CodeProject.com

More Related Content

PPTX
Windows Communication Foundation
PPT
Windows Communication Foundation
PDF
Wcf development
PPTX
07 advanced topics
PPT
WCF And ASMX Web Services
PPT
Session 1: The SOAP Story
PPT
Wcf architecture overview
PPTX
Windows communication foundation ii
Windows Communication Foundation
Windows Communication Foundation
Wcf development
07 advanced topics
WCF And ASMX Web Services
Session 1: The SOAP Story
Wcf architecture overview
Windows communication foundation ii

What's hot (10)

PPTX
Intoduction to web services
PDF
Developing Revolutionary Web Applications using Comet and Ajax Push
PPTX
Azure Bootcamp Louisville - Service bus
PPTX
Multi-Process JavaScript Architectures
PPTX
WSDL Services
PPTX
Webservices
PPTX
About jms
PPTX
Hyperlinked Entities: decentralised micro-services, Paulo Chainho, Altice Labs
PPTX
How a Proxy Server Works
PPTX
web programming
Intoduction to web services
Developing Revolutionary Web Applications using Comet and Ajax Push
Azure Bootcamp Louisville - Service bus
Multi-Process JavaScript Architectures
WSDL Services
Webservices
About jms
Hyperlinked Entities: decentralised micro-services, Paulo Chainho, Altice Labs
How a Proxy Server Works
web programming
Ad

Viewers also liked (20)

PPTX
Net remoting
PPTX
WCF security
PDF
ITCamp 2012 - Mihai Nadas - Tackling the single sign-on challenge
PPT
Paypal-IPN
PPTX
How to Launch a Web Security Service in an Hour
PDF
Pyscho-Strategies for Social Engineering
PPTX
Cusomizing Burp Suite - Getting the Most out of Burp Extensions
PPT
Dot NET Remoting
PDF
Burp suite
PPTX
Windows Azure Versioning Strategies
PPTX
Wcf security session 1
PPT
Web Service Security
PPTX
Burp plugin development for java n00bs (44 con)
PDF
Overview of Microsoft .Net Remoting technology
PPTX
Burpsuite yara
PPTX
Pentesting With Web Services in 2012
PPTX
WCF Security, FSec
PDF
Pentesting RESTful webservices
PDF
PPT
Pentesting Using Burp Suite
Net remoting
WCF security
ITCamp 2012 - Mihai Nadas - Tackling the single sign-on challenge
Paypal-IPN
How to Launch a Web Security Service in an Hour
Pyscho-Strategies for Social Engineering
Cusomizing Burp Suite - Getting the Most out of Burp Extensions
Dot NET Remoting
Burp suite
Windows Azure Versioning Strategies
Wcf security session 1
Web Service Security
Burp plugin development for java n00bs (44 con)
Overview of Microsoft .Net Remoting technology
Burpsuite yara
Pentesting With Web Services in 2012
WCF Security, FSec
Pentesting RESTful webservices
Pentesting Using Burp Suite
Ad

Similar to Basics of WCF and its Security (20)

PPTX
Windows Communication Foundation (WCF)
PPTX
1. WCF Services - Exam 70-487
PPT
WCFPresentation.ppt WCFPresentation.ppt WCFPresentation.ppt
PPT
Dot Net Training Wcf Dot Net35
PDF
Wcf Overview
PPT
Session 1 Shanon Richards-Exposing Data Using WCF
DOC
WCF tutorial
PDF
Windows Communication Foundation (WCF)
PPS
WCF (Windows Communication Foundation_Unit_01)
PPT
WFC_DotNetWindowsCommunicationFoundation.ppt
PPT
Windows Communicaiton Foundation
PDF
WCF Interview Questions By Scholarhat PDF
PPTX
Lunch Learn - WCF Security
PPTX
WCjffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff...
DOCX
Dealing with Diversity: Understanding WCF Communication Options in ...
PPT
WINDOWS COMMUNICATION FOUNDATION
PPT
PPT
DotNet_WindowsCommunicationFoundation.ppt
PPTX
Learn WCF at ASIT
Windows Communication Foundation (WCF)
1. WCF Services - Exam 70-487
WCFPresentation.ppt WCFPresentation.ppt WCFPresentation.ppt
Dot Net Training Wcf Dot Net35
Wcf Overview
Session 1 Shanon Richards-Exposing Data Using WCF
WCF tutorial
Windows Communication Foundation (WCF)
WCF (Windows Communication Foundation_Unit_01)
WFC_DotNetWindowsCommunicationFoundation.ppt
Windows Communicaiton Foundation
WCF Interview Questions By Scholarhat PDF
Lunch Learn - WCF Security
WCjffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff...
Dealing with Diversity: Understanding WCF Communication Options in ...
WINDOWS COMMUNICATION FOUNDATION
DotNet_WindowsCommunicationFoundation.ppt
Learn WCF at ASIT

More from Mindfire Solutions (20)

PDF
Physician Search and Review
PDF
diet management app
PDF
Business Technology Solution
PDF
Remote Health Monitoring
PDF
Influencer Marketing Solution
PPT
High Availability of Azure Applications
PPTX
IOT Hands On
PPTX
Glimpse of Loops Vs Set
ODP
Oracle Sql Developer-Getting Started
PPT
Adaptive Layout In iOS 8
PPT
Introduction to Auto-layout : iOS/Mac
PPT
LINQPad - utility Tool
PPT
Get started with watch kit development
PPTX
Swift vs Objective-C
ODP
Material Design in Android
ODP
Introduction to OData
PPT
Ext js Part 2- MVC
PPT
ExtJs Basic Part-1
PPT
Spring Security Introduction
Physician Search and Review
diet management app
Business Technology Solution
Remote Health Monitoring
Influencer Marketing Solution
High Availability of Azure Applications
IOT Hands On
Glimpse of Loops Vs Set
Oracle Sql Developer-Getting Started
Adaptive Layout In iOS 8
Introduction to Auto-layout : iOS/Mac
LINQPad - utility Tool
Get started with watch kit development
Swift vs Objective-C
Material Design in Android
Introduction to OData
Ext js Part 2- MVC
ExtJs Basic Part-1
Spring Security Introduction

Recently uploaded (20)

PDF
cuic standard and advanced reporting.pdf
PDF
Modernizing your data center with Dell and AMD
PPTX
MYSQL Presentation for SQL database connectivity
PPTX
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
PDF
Agricultural_Statistics_at_a_Glance_2022_0.pdf
PPT
Teaching material agriculture food technology
PDF
Network Security Unit 5.pdf for BCA BBA.
PDF
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
PDF
Empathic Computing: Creating Shared Understanding
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PPTX
A Presentation on Artificial Intelligence
PPTX
Understanding_Digital_Forensics_Presentation.pptx
PDF
CIFDAQ's Market Insight: SEC Turns Pro Crypto
PDF
Bridging biosciences and deep learning for revolutionary discoveries: a compr...
PDF
Unlocking AI with Model Context Protocol (MCP)
PPTX
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
PDF
Machine learning based COVID-19 study performance prediction
PDF
Spectral efficient network and resource selection model in 5G networks
PDF
KodekX | Application Modernization Development
PDF
Encapsulation theory and applications.pdf
cuic standard and advanced reporting.pdf
Modernizing your data center with Dell and AMD
MYSQL Presentation for SQL database connectivity
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
Agricultural_Statistics_at_a_Glance_2022_0.pdf
Teaching material agriculture food technology
Network Security Unit 5.pdf for BCA BBA.
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
Empathic Computing: Creating Shared Understanding
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
A Presentation on Artificial Intelligence
Understanding_Digital_Forensics_Presentation.pptx
CIFDAQ's Market Insight: SEC Turns Pro Crypto
Bridging biosciences and deep learning for revolutionary discoveries: a compr...
Unlocking AI with Model Context Protocol (MCP)
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
Machine learning based COVID-19 study performance prediction
Spectral efficient network and resource selection model in 5G networks
KodekX | Application Modernization Development
Encapsulation theory and applications.pdf

Basics of WCF and its Security

  • 1. Getting started with Windows Communication Foundation & its Security By, Ratan Sharma ratans@mindfiresolutions.com
  • 2. Agenda → History of Web Services → Service Orientation → Introduction to WCF → WCF Architecture → End points → Demo → WCF Security → Security support for different bindings → Security modes → Demo
  • 3. COM Component object model DCOM Distributed COM .Net Remoting COM + Mechanism for communicating between applications and components running on the Windows platform for same computer. Mechanism for communicating between applications and components running on other computers over a network. Integration with Microsoft Transaction Server so applications could group operations on components together into transactions. A client application could access a remote object hosted by a remote server application as if it were running locally, inside the client application Mechanism for communicating between applications and components running on the Windows platform for same computer. Inter Process Communication Technologies
  • 5. BALANCE between push and pull.. (Common Data format & Common Protocol) Choice: How do you want to get info? How do you want to deliver it?
  • 6. What is WCF ? Windows Communication Foundation (WCF) is a technology for developing applications based on service-oriented architecture (SOA).
  • 7. The four tenets of service orientation Service compatibility is determined based on policyService compatibility is determined based on policy Services share schema and contract, not classServices share schema and contract, not class Services are AutonomousServices are Autonomous Boundaries are ExplicitBoundaries are Explicit
  • 8. Why WCF ?? → Multiple protocol support → Full duplex communication → Different hosting environment → Different serializer option → Messages can be queued using persistence queuing. As a result, no delays occur, even under high traffic conditions.
  • 9. WCF .Net Remotin g Enterpris e Services Messagin g ASMX WSE Interop with Other platforms WS* Protocol support Message oriented programming Extensibility location transparency Attribute based programming
  • 11. How to reach your service ? Address : URI of the WCF service - Transport Scheme -Server location - Port - Path Binding : Defines how the WCF service handles the request - BasicHttpBinding, NettcpBinding etc Contract : Defines what public data and interfaces the WCF service provides to the client. - Service contract, Data Contract, Fault Contract, Message Contract End Point
  • 12. Instance Management New Instance New Instance New Instance Instance Per-Call Singleton Per-Session Request Instance 1 Instance 2 Instance 3 Client Client 1 Client 2 Client 3 Request Request Client 1 Client 2 Client 3
  • 13. Demo
  • 15. Security Mode 5 possible security modes → None → Transport → Message → Both (only msmq support this) → TransportWithMessageCredential → TransportCredentialOnly
  • 16. Bindings supporting Transport, Message and mixed mode Binding Transport Mode? Message Mode? Mixed Mode? BasicHttpBinding Yes Yes Yes WSHttpBinding Yes Yes Yes WSDualHttpBinding No Yes No NetTcpBinding Yes Yes Yes NetNamedPipeBinding Yes No No NetMsmqBinding Yes Yes No MsmqIntegrationBinding Yes No No wsFederationHttpBinding No Yes Yes
  • 17. Message over a Channel Message Message Message Message $%$^$^ $%#$% W$#@%# $^$%^ $%^^ @$#% $%^^ @$#% WCF Client WCF Service EndPoint Message Message WCF Client WCF Client WCF Client WCF Client WCF Service EndPoint WCF Service EndPoint WCF Service EndPoint WCF Service EndPoint WCF Service EndPoint WCF Service EndPoint
  • 18. Demo