Rethinking Application Security
Summary:
Discovering security problems early in the development cycle is only the first step toward creating more secure and reliable applications, says Parasoft's Wayne Ariola in an interview with Artima. For developers to work effectively in a security-conscious environment, addressing security-related coding issues must be integrated in developers' daily workflow.
The ability to add new comments in this discussion is temporarily disabled.
Most recent reply: May 8, 2008 9:00 AM by
Vijay
|
|
Discovering security problems early in the development cycle is only the first step toward creating more secure and reliable applications, says Parasoft's Wayne Ariola:: http://www.artima.com/lejava/articles/javaone_2008_wayne_ariola.htmlTo what extent do you integrate security-related code checks into your development workflow?
|
|
|
|
|
Security is an aspect that most people don't pay attention to till its too late. I think application and its security rules should have as small intersection as possible. The great thing about JAAS is that its part of the language itself but it thins the line between business logic code and the policy rules. The essay is nice but I'd like to see Parasoft's solution with an example.
|
|