In this article, the fourth and last in the series, I will cover Java's optional security packages, which focus on resisting distributed system threats. I will show how to use a strong encryption framework, even outside the US thanks to recent favorable changes in US export control laws. Further, we'll see simple code samples and follow through with the example we looked at in Part 3 . We will enhance that example to also read from an SSL socket, not necessarily from the same system to which it made an HTTP connection. This security series does not intend to provide a comprehensive guide to computer security.
Computer security is a multifaceted issue touching several disciplines, departments, and cultures.
Investments in technologies should be followed up with investments in personnel training, strict policy enforcement, and periodic review of the overall security policy. So, let's get to it. Read below for more details. This CodeSource -based access control lacks the ability to enforce access based on who is running the code. JAAS supplements the Java 2 security architecture by providing a framework to do so, as illustrated in Figure 1.