Identity permissions control code access from one assembly to another. You can use identity permissions, which are a subset of code access permissions, either declaratively or imperatively

CAS is a part of .NET security model that determines whether a piece of code is allowed to run and what resources it can use while running,eg:CAS will allow a application to be read but cannot delete it.