SCEA之路--10. Security

General.
• nothing is 100% secure
• only as strong as the weakest link (e2e security requires many layers)
• manageable (a complex system will only serve to confuse admins/users)
• security must be included as part of the design not retro-fitted

Identify Security Restrictions That Java 2 Technology Environments Normally Impose on Applets Running in a Browser
• An applet can utilize only its own code and is not allowed to load libraries or define native methods.
• An applet cannot read or write files on the host that is executing it.
• An applet can make network connections only to the host from which it was downloaded.
• An applet cannot start any program on the local host.
• An applet is restricted from reading the following system properties:
java.home, java.class.path, user.name, user.home, and user.dir.

Given an Architectural System Specification, Identify Appropriate Locations for Implementation of Specified Security Features and Select Suitable Technologies for Implementation of Those Features
• Authentication
    • Authentication method: BASIC, FORM, DIGEST, and CLIENT-CERT
    • Digital certificates, certificate authorities
    • Secure Sockets Layer (SSL)
    • Common Secure Interoperability (CSIv2)
    • Identity selection: <run-as> or <use-caller-identity>
    • Security roles
• Authorization
    • Authorization enforced by the container (declarative), defined in the deployment descriptor
    • Authorization enforced by the component (programmatic), defined within the application code

SCEA之路--10. Security相关推荐

[ASP.NET MVC 小牛之路]10 - Controller 和 Action (2)
继上一篇文章之后,本文将介绍 Controller 和 Action 的一些较高级特性,包括 Controller Factory.Action Invoker 和异步 Controller 等内容. ...
【近3万字分享】《Android开发之路——10年老开发精心整理分享》
目录前言 1 Android开发学习路线 1.1 大神最新总结(推荐直接看这个) 2021 最新Android知识体系 1.2按内容划分 1.3按阶段划分 1.4Android进阶路线(思维导图) ...
czl蒻蒟的OI之路10、11、12
好久没有发微博了表示自己也很绝望啊今天来个三连击 XJOI奋斗群蒻蒟群群赛11 RANK排名11 T1The Wall WA一次后AC 题意分析过程给出题解 T2Maximal Area Quad ...
夺神之权服务器维护,流放之路 10月19日夺神之权服务器停机更新公告
亲爱的流放者: 我们将于10月19日6:00~8:00对[夺神之权]服务器进行停机更新,更新时间可能会根据实际情况进行提前或推迟. 给大家带来的不便敬请谅解,感谢一直以来对<流放之路>的支 ...
python成长之路10——socketserver源码分析
1 s = socket.socket(socket.AF_INET,socket.SOCK_STREAM,0) 2 3 参数一:地址簇 4 socket.AF_INET ipv4(默认) 5 soc ...
安卓10侧边返回_Android 之路 (10) - 集成滑动返回(SwipeBackLayout)
引言滑动返回不说是App的标配,但起码也是非常常见的功能了,本章主要讲解集成一个开源的滑动返回库:SwipeBackLayout.抱歉,本篇不是造轮子的文章. 正文关于SwipeBackLayou ...
GO语言学习之路10
2022/02/01package mainimport ("fmt""strconv""strings" )//1.字符串中常用的系统函数 ...
Esp8266进阶之路10 【小实战下篇】Windows系统搭建8266的本地Mqtt服务器，局域网点亮一盏LED灯。(带Demo)
本系列博客学习由非官方人员半颗心脏潜心所力所写,不做开发板.仅仅做个人技术交流分享,不做任何商业用途.如有不对之处,请留言,本人及时更改. 序号 SDK版本内容链接 1 nonos2.0 搭建 ...
FPGA自学之路10（无源蜂鸣器）
vis文件损坏,打不开了.....框图这些都没有了.大致就是用板子实现7个音调,每个音调的区别在于频率不一样,占空比代表响度.下面是rtl代码 module beep #( parameter CNT ...

SCEA之路--10. Security

SCEA之路--10. Security相关推荐

最新文章

热门文章