| Term | Definition |
| access control list (acl) | shorthand term for (Discretionary ACL),which is an authorization restcition mechanism that identifies the users and groups that are assigned or denied access permissions on an object. |
| Advanced Encryption Standard (AES) | A synonym for Rijndael, which is a symmetric encryption algorithm that useskey sizes of 128 through 256 bits. |
| application domain | A logical container that allows multiple assemblies to run within a single proces, while preventing them from directly accessing another assembly's memory. |
| application setting | A custom setting that the application reads,writes, or both. |
| assembly evidence | Evidence that an assembly presents that describes the assembly's identity, such as the hash, the publiher, or the strong name. |
| asymmetric encryption | A cryptography technique that uses separate private and public keys to encrypt and decrypt data. Also known as public-key encryption. |
| Asynchronous Programming Model | A pattern of working with specific types of .NET classes that use Beign/End methods pairs to provide asynchronous execution of certain methods. |
| attribute | A specific class type in the .NET Framework that allows for declarative binding of code. |
| authentication | The process of identifying a user. |
| authorization | The process of verifying that a user is allowed to access a request resource. |
| Binary Formatter | Located in System.Runtime.Serialization.Formatters.Binary namespace, this formatter is the most efficient way to serialize objects that will be read only by .NET Framework-based applications. Bitmap Located in the System.Drawing namespace, this class provides methods for loading and saving images, and editing individual pixels. |
| boxing | Converting from a value type to reference type, which offer occurs implicitly. Brush Located in the System.Drawing namespace, classes derived from the Brush class are required for drawing text and filling in shapes. |
| code access security (CAS) | A security system that enables administrators and developers to authorize applications, similar to the way they have always been able to authorize users. |
| cast | A conversion from one type to another. |
| COM Callable Wrapper (CCW) | A proxy class that sits between a .NET assembly and a COM component and that allows the COM component to consume the .NET assembly. |
| cipher text | Encrypted text generated by an encryption algorithm that cannot be converted to plain text without a secret key. |
| CLS-compliant exception | Any exception object managed by the .NET Framework. All CLS-compliant exceptions derive from that System.Exception hierarchy. CLS stands for Common Language Specification. |
| code group | Authorization device that associates assemblies with permission sets. |
| code page | A list of selected character codes (with characters represented as code points) in a certain order. Code pages are usually defined to support specific languages or groups of languages or groups of languages that share common writing systems. Windows code pages contain 256 code points and are zero-based. |
| collection | any class that allows for gatheringitems into lists and for iterating through those items. |
| Component Object Model (COM) | Prior to .NET COM was the fundamental developement framework from Microsoft |
| configuration management | The practive of handling and managing how an application is set up and configured. |
| connection string | A specfic value used by an application o connect to a given database. |
| constraint | A condition on a type parameter that restricts the type argument you can supply for it. A constraint can require that the type argument implement a particular interface, or be inherited from a particular class, have an accessible parameterless constructor, or be a reference type or a value type. You can combine these constraints, but you can specify at most one class. |
| contract | interface |
| current culture | The current culture that the application is currently configured to run under. |
| current UI culture | The culture used to display many visual interface elements. This might or might not be the same as the current culture. |
| Data Encryption Standard (DES) | A symmetric encryption algorithm that uses relatively short key lDebugger objects to be attached to code. engths that are vulnerable to cracking attacks. Debug A specific constant defined in an application that allows Debugger objects to be attached to code.Debugger A class that provides access to the default debugger attached to an application. |
| declarative RBS demands | Access restrictions that are declared as an attribute to a method and that instruct the runtime to perform an access check before running the method. |
| defense-in-depth | The security principle of providing multiple levels of protection so that your system is still protectedin the eventof a vulnerability. |
| deflate | An industry standard for compressing data that is efficient, commonly used, and patent free. |
| deserialization | The process of converting a previously serialized sequence of bytes into an object. |
| digital signature | A value that can be appended to electronic data to rpove that it was created by someone who process a specific private key. |