Oracle WebCenter 11g Handbook

CHAPTER 18Security

Inside organizations, application security is often overlooked because of heterogeneous technology environments, organizational complexity, and limited resources.¹ The depth and complexity of security issues is often underestimated, since security can take many forms—it spans applications, information, and networks. This chapter deals mainly with application and information security from a developer’s perspective.

Application security is a subset of information security, since all sorts of information exist outside software systems. At the same time, the ultimate goal of all software is to create, manage, and edit information. Thus, the basic principles of information security—confidentiality, integrity, and availability—apply ...