Security Overview

Security is an essential aspect of most, if not all, enterprise applications. However, defining an application as secure is not as easy as it sounds, because the definition of secure can be interpreted in different ways.

To some users, a Web site is secure if they have to provide a username and password to obtain access to the Web pages. As you will see, just because a site requires a user to login does not make it secure.

Security Terminology

Security has many aspects that can be categorized into the following areas:

  • Authentication

  • Authorization

  • Confidentiality

  • Integrity

  • Non-repudiation

  • Auditing

Each of these categories is discussed in this section.

Authentication

Authentication means identifying a client as a valid user of the ...

Get Sams Teach Yourself J2EE™ in 21 Days now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.