Education for Everyone in PDF Form
WebLogic is a J2EE server and as such provides support for J2EE API’s including. JDBC JTA EJB RMI over IIOP Servlets JSP JNDI JMS WebLogic defines a number of concepts so before we get rolling we should investigate what WebLogic server physically is. When you installed WLS you choose a directory to put it in,…
Continue ReadingKey Management: Another consideration is protecting your keys and certificates. If someone stole your keys and/or your certificates, this would be a serious risk to the entire security cycle. Having your private keys and certificates/public keys stolen allows thieves to impersonate you and thus, compromising your data integrity, authentication and possibly even authorization. Key management…
Continue ReadingData Integrity Recap We’ve looked at a lot of concepts so far that build on top of each other (and we’re not done yet). Before we proceed, let’s take a minute to digest (pun intended) how the concepts we seen so far are related: To ensure that only certain people can read our data, we…
Continue ReadingDigital Certificates We’ve encrypted the message digest so we should be safe, right? Well, not quite. Q: How do we know that the public key that we’re using to decrypt the digital signature is not actually from an imposter? A: Digital Certificates A certificate essentially provides two things: 1) A party’s public…
Continue ReadingDigital Signatures : A quick explanation of a digital signature is an encrypted hash. With that said, we can review our situation so far: – To ensure that only certain people can read our data, we can encrypt the data. — Otherwise — 1) To ensure that plaintext data hasn’t been tampered with, we generate…
Continue ReadingHybrid/Session Key Systems: When we compare symmetric and asymmetric encryption, here’s essentially what we come up with: Symmetric encryption is faster but less secure Asymmetric encryption is slower but more secure To get the best of both worlds, we introduce a Session key system (also known as a hybrid system). Hybrid systems use both symmetric…
Continue ReadingAsymmetric encryption (also known as Public-Key Encryption) gives us the means to give the sender and receiver two different keys: Public key Private key To simplify how asymmetric encryption works, we will use names to describe communication: Mulder has both a private and public key – he sends Scully his public key. The Scully is…
Continue ReadingCryptography Cryptography – methods and means used to protect information by changing it into an unreadable format. Cryptography is the general term that encompasses the hiding of data – typically done through encryption or encoding. Encoding simply rewrites data in another format Encryption uses a predetermined key to rewrite messages. Encryption and encoding can be…
Continue ReadingNotice that after the main method finishes in the previous example, the main stack area is removed. The result of this would be that the account and amount variable fall out of scope. When account is out of scope, nothing is left pointing to the instance of BankAccount. Thus, the object is eligible for garbage…
Continue ReadingAs seen in the code examined so far, variables and methods have a certain range in which they exist and where they can be accessed. The concept here is known as scope. There are different levels of scope. Scope pertains to where data exists (to which context it belongs). Scope can most easily be identified…
Continue Reading