Securing Application Pages in SharePoint 2010

I'm creating some application pages that can only be viewed by one AD group and everyone else should be denied access. Can I use roles authorization like I would in an ASP.NET WebForms application by dropping in a web.config for the开发者_如何学运维 specific application? If not, what would be the best way to handle security?

Thanks.

---

Yes, doing role based stuff in web.config will work and I have done such a thing.