Facilitating the Spread of Knowledge and Innovation in Professional Software Development

Write for InfoQ


Choose your language

InfoQ Homepage News WCF Security Analysis Available from the German Federal Office for Information Security

WCF Security Analysis Available from the German Federal Office for Information Security


The German Federal Office for Information Security (BSI) has released their security analysis for Windows Communication Foundation along with a reference implementation.

The Federal Office for Information Security (BSI) performed an in-depth security analysis of WCF, the results shall enable enduringly secure operations of distributed systems on the .NET platform and in interoperable interactions with other service oriented solutions. Target-oriented and compact guidance is provided for all phases of software development, illustrating best practices, exploiting WCF security features, and required additional measures substantiated by a reference application.

Beside the complete source code of the WCF reference application the BSI distributes manuals covering WCF specific architecture aspects, authentication, data access, development autonomy, distributed error handling, the hosting environment, transport security, securing resources, and secure service set-up and installation.

The documentation and source code is under the GPL and is only available in English. It can be obtained by sending an email request to

Rate this Article


Hello stranger!

You need to Register an InfoQ account or or login to post comments. But there's so much more behind being registered.

Get the most out of the InfoQ experience.

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Community comments

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p