Developer's Guide to Web Application Security

it is your responsibility to make it as invisible as possible for users. If it causes extra

work for users—even something as simple as another login and password to

remember—users may start to resent having to use the application, or just opt not to

use it at all. Other times, users may not use the security features properly because the

design is overly complicated.

Solutions Fast Track

Overview of the Java Security Architecture

■

The five tenets of security are containment, authentication, authorization,

encryption, and auditing.

■

Security systems that are implemented at the JVM level are far less likely to

contain holes than security implemented at the ...