基于J2EE分布式模型的安全分析

Analysis of J2EE Distributed System Security

讨论了基于J2EE分布式模型的安全架构,提出了可应用于中小型企业的一般安全服务,如认证与授权服务、访问控制、数据机密性和非否认等.对涉及信息安全的Java2核心API与扩展API进行分析,从虚拟机、核心安全服务、Web服务以及组件模型等方面阐述了J2EE平台的安全性实现,同时指出了基于J2EE分布式系统具体实现时应注意的一些信息安全问题.

This paper is an attempt to analyse the security architecture of J2EE distributed system and introduce authentication and authorication and authorization service in the J2EE platform specification.We discuss the Java 2 security platform,and point out some problems that should be considered in the realization of J2EE distributed application.