.net 序列化总结

  .net序列化

序列化是使对象持久化,将对象存储到文件系统中,持久化对象.

序列化会应用到.net remoting场景中

在类定义前加[Serializable]这样一个attribute,这个类就可以序列化了.

在类的某个成员变量前加[NonSerializable],这个变量将不会序列化都文件系统中,但是对public变量,即使使用了[NonSerializable]属性,仍然会序列化到XML文件中,但是Binaray格式的序列化则对这个成员变量不会序列化.

序列化的过程是和流Stream打交道,如FileStream,MemoryStream,NetworkStream

格式化形式:采用哪种格式进行序列化

提供如下三种格式:

BinaryFromatter:二进制格式

SoapFormatter:序列化成soap消息

XMLSerializer:Xml文件

Soap文件包括:soap envelop ,soap body

 

序列化的命名空间:

binaryformatter: System.Runtime.Seriealization.Formatter.Binary

SaopFormatter:System.Runtime.Serialization.Formatter.Soap

XMLSerializer: System.Xml.Serialization

FileStream:System.IO

ArrayList: System.Collection

 

序列化,反序列化

 

序列化过程中的安全问题

对一些private, sensitive信息,需要进行加密

System.security.Crypography提供对流的加密操作,包括对流进行单向和双向的加密操作

 

深度序列化:公共和私有的变量都可以序列化 soapFormatter/BinaryFormatter

浅序列化:只有公共变量可以序列化,而私有变量不可以进行序列化 XMLSeriealizer

 

binary序列化,文件小

XML,soap 都是开放的协议,可以在不同的平台下进行操作

 

Example 1:

using System;

using System.Collections.Generic;

using System.Text;

using System.Collections;

using System.IO;

using System.Runtime.Serialization.Formatters.Binary;

using System.Xml.Serialization;

 

 

namespace SeralizeSample

{

    class Program

    {

        static void Main(string[] args)

        {

            ArrayList l = new ArrayList();

            for (int i = 0; i < 100; i++)

            {

                l.Add(i);

            }

            l.Add("sfsdfsdfsdf");

            FileStream f = new FileStream("C://11.bin",FileMode.Create);

            BinaryFormatter b = new BinaryFormatter();

           

            b.Serialize(f, l);

            f.Close();

          

            FileStream k = File.OpenRead("C://11.bin");

            BinaryFormatter b1 = new BinaryFormatter();

            ArrayList p = (ArrayList) b1.Deserialize(k);

            k.Close();

            for (int j = 0; j < p.Count; j++)

            {

                Console.WriteLine(p[j]);

            }

            Console.ReadLine();

                  

        }

    }

}

 

Example 2:

using System;

using System.Collections.Generic;

using System.Text;

 

namespace SeralizeExample

{

    [Serializable]

    public class Person

    {

        public String Name = "";

        private int Age = 25;

        public String Eduction = null;

        [NonSerialized]

        public String ID = "dsd2";

    }

}

 

private void button1_Click(object sender, EventArgs e)

        {

            Person obj = new Person();

            obj.Name = "zhanghl";

            obj.Eduction = "Doctor";

            Stream stream = new FileStream("C://personbin.bin", FileMode.Create);

            BinaryFormatter b = new BinaryFormatter();

            b.Serialize(stream, obj);

            stream.Close();

 

        }

 

        private void button2_Click(object sender, EventArgs e)

        {

            Person obj = new Person();

            obj.Name = "zhanghl";

            obj.Eduction = "Doctor";

            Stream stream = new FileStream("C://personxml.xml", FileMode.Create);

            XmlSerializer b = new XmlSerializer(typeof(Person));

            b.Serialize(stream, obj);

            stream.Close();

        }