The technologies that fall under the umbrella of the .NET security framework include:
IIS
ASP.NET
Enterprise Services
Web Services
.NET Remoting
SQL Server
These are illustrated in Figure 1.
Figure 1. The .NET Web application security framework