|
Today, large-scale industry increasingly relies on various network applications to solve various business problems. As the network has the characteristics of information sharing, it is possible to live in accordance with the needs of users to access information, and timely processing of information. It is very important to the user, while the huge demand for network applications, the birth of a large number of new software technology. Java web applications for a good support to help the rapid development of Java and widely accepted. Users connect to the network to share information, but also expose the system to the risk of cyber attacks. Especially when users download software from the Internet and run locally, the system must have the ability to resist viruses and Trojans and other malicious software on the local system hazards. At the same time, the system must also be run on the local environment and to protect privacy information. For example, a user browsing a web page when embedded Java Applet, Applet on the Web browser program may be automatically downloaded to the local and the local Java Runtime Environment to run. And this Applet if it is from a malicious site, or users on the network through a JINI lookup service to unreliable network services, all will threaten security of user information. These facts show that the users for the Java Runtime Environment made more stringent security requirements. So, if the Java runtime environment does not provide security mechanism, which is likely to result in information disclosure introducing malicious programs, data loss, misuse, forgery and tampering with the letter after the data and the local computer settings are modified as a consequence, and bring serious unknown consequences. In the IT industry, safety issues and more serious consequences. Consumers, businesses and government for information security increasingly high degree of attention. To ensure information security, must deeply understand the key security-related businesses, potential threats and system architecture and other aspects. System security must rely on a good security architecture, and in information processing, transmission and storage security methods implemented at all levels. Meanwhile, with Java technology widely popular in enterprise applications, Java applications, security issues are also becoming increasingly important. Java security architecture from all parties and, including the Java platform, Java scalable security architecture, and many other aspects of Java application security. In this paper, by studying the Java source code to Java security architecture perspective, to analyze the design and implementation of methods to develop Java security design methods. In this paper, several parties and conducted the following tasks: 1. Through analysis of the source code, in-depth study Java platform security. Research mainly includes, Java Virtual Machine Security, Java language security, Java built-in security model, Java Applet security, protection of Java code security and other five security issues. (2) in-depth study scalable Java security architecture. Security must be extended to all levels, including users, components, services and communications. Through the Java Cryptography Architecture, Java Cryptography Extension, Java Certification Path API, Java Secure Socket Extension, Java Authentication and Authorization Service, Java Generic Security Services, scalable security architecture. 3. Implement a comprehensive security framework for practical small, validate Java security architecture.
|