This title presents a scenario-based approach to designing and building secure applications that are based on ASP.NET technology. It identifies exactly where and how developers should perform authentication and authorization, and it demonstrates both how and when to use security techniques in establishing communication within and across the tiers of distributed Microsoft .NET Web applications. Above all, it imparts best practices for predictable results-based on proven techniques and insights gleaned from Microsoft product teams and the experience of Microsoft customers.