IBM WebSphere V5.0 Security - CGISecurity

2.3 Security in useSince security is a complex and diversified topic, it is important to keep it simple.The following list will show the basic security areas. These areas have to betaken into account and their requirements must always be fulfilled.►►►►►►►►Authentication / Identification - Measures designed to protect againstfraudulent transmission and imitative communications by establishing thevalidity of transmission, message, station or individual.Access Control - The prevention of improper use of a resource, including theuse of a resource in an unauthorized manner.Privacy / Confidentiality - Assurance that information is not made availableor disclosed to unauthorized individuals, entities, or processes.Integrity - The correctness of information, of the origin of the information, andof the functioning of the system that processes it.Accountability / Non-repudiation - Assurance that the actions of an entitymay be traced uniquely to the entity. This ensures that there is information toprove ownership of the transaction.Administration / Configuration - Methods by which security policies areincorporated into the architecture and the functionality that the systemarchitecture needs to support.Assurance / Monitoring - Confidence that an entity meets its securityobjectives; this is usually provided through an Intrusion Detection System.Security Management - Assurance that an entity meets its securitymanagement objectives, processes and procedures.If you keep this list in mind during design and development, security will be wellimplemented.18 IBM WebSphere V5.0 Security Handbook