When you hear the word security, what comes to mind? SSL? Firewalls?
Authentication? Authorization? B-52 bombers? Security means different things
to different people, but in the context of securing applications, we can
think of security in two parts: access control and secure communication.
Existing Measures
Access control encompasses a number of concepts, including identity
management, authentication, authorization, and auditing. It includes knowing
who your users are, knowing what they can do in your applications, and
keeping a record of what they have done. There are a variety of products on
the market today that provide cost-effective and manageable solutions for
securing Web-based applications. Access control products work by integrating
with a directory of user identities, typically stored in an LDAP directory or
a relational database, and use the user identity... (more)