Facilitating the spread of knowledge and innovation in professional software development



Choose your language

InfoQ Homepage News WCF Security Analysis Available from the German Federal Office for Information Security

WCF Security Analysis Available from the German Federal Office for Information Security


The German Federal Office for Information Security (BSI) has released their security analysis for Windows Communication Foundation along with a reference implementation.

The Federal Office for Information Security (BSI) performed an in-depth security analysis of WCF, the results shall enable enduringly secure operations of distributed systems on the .NET platform and in interoperable interactions with other service oriented solutions. Target-oriented and compact guidance is provided for all phases of software development, illustrating best practices, exploiting WCF security features, and required additional measures substantiated by a reference application.

Beside the complete source code of the WCF reference application the BSI distributes manuals covering WCF specific architecture aspects, authentication, data access, development autonomy, distributed error handling, the hosting environment, transport security, securing resources, and secure service set-up and installation.

The documentation and source code is under the GPL and is only available in English. It can be obtained by sending an email request to

We need your feedback

How might we improve InfoQ for you

Thank you for being an InfoQ reader.

Each year, we seek feedback from our readers to help us improve InfoQ. Would you mind spending 2 minutes to share your feedback in our short survey? Your feedback will directly help us continually evolve how we support you.

Take the Survey

Rate this Article


Hello stranger!

You need to Register an InfoQ account or or login to post comments. But there's so much more behind being registered.

Get the most out of the InfoQ experience.

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Community comments

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p


Is your profile up-to-date? Please take a moment to review and update.

Note: If updating/changing your email, a validation request will be sent

Company name:
Company role:
Company size:
You will be sent an email to validate the new email address. This pop-up will close itself in a few moments.