Overview of Configuring Security in Web Applications
You can secure a Web Application by using authentication, by restricting access to certain resources in the Web Application, or by using security calls in your servlet code. Several types of security realms can be used. Security realms are discussed in the document Security Fundamentals. Note that a security realm is shared across multiple virtual hosts.
Setting Up Authentication for Web Applications
To configure authentication for a Web Application, use the <login-config> element
Physical Security
The computer running the web server should be kept physically secured in a locked area. Any backup storage media (tapes, removable disks, etc.) should be similarly protected.
Operating system security
Limited services
The services offered by the computer running the web server should be kept to a minimum. This minimizes the threats to the web server, since each network service carries its own risks. By eliminating all nonessential services you eliminate potential holes through which an attacker could break into your system.
XKMS helps make security manageable
Introduction:
The XML Key Management Specification (XKMS) outlines an easy mechanism for accessing and integrating with Public Key Infrastructure (PKI). In this article, Manish Verma explains the objective behind XKMS and then offers a step-by-step guide to using the XKMS service to register and retrieve information related to a public and/or private key.
With an ever-increasing number of people and businesses relying on the Internet to exchange confidential and sensitive information, security has become a
W3C Recommendation 12 February 2002:
Abstract
This document specifies XML digital signature processing rules and syntax. XML Signatures provide integrity, message authentication, andor signer authentication services for data of any type, whether located within the XML that includes the signature or elsewhere.
Status of this document
This document has been reviewed by W3C Members and other interested parties and has been endorsed by the Director as a W3C Recommendation. It is a stable document and may be used as reference material or cited as a