Interested to Buy Any Domain ? << Click Here >> for more details...
How does CORBA security affect application writers?
- 1 Answers
- 3490 Views
- I also Faced
- E-Mail Answers
Answer Posted / rithi
Linda Gricius (March, 1998):
In a secure CORBA system, the same client calls the same
target object that it would call in an unsecured system. The
invocation request is intercepted by the ORB Security
service at both client and target, and the level of
protection required by the current policy settings is
applied. Security may be enforced at the client side, the
target side, or both. This includes support for any or all
of the following:
* Establishing secure associations between the client
and target;
* Integrity and/or confidentiality protection for
individual requests and replies sent between the client and
target;
* Access control checks to determine if the principal is
allowed to perform this operation on the target object;
* Auditing of security-relevant events.
Since the invocation is intercepted in the ORB, it is
transparent to the application. However, applications that
want to enforce their own security controls can call on the
Security services directly.
It's important to note that object implementations do not
need to be changed to fit into and be protected by a secure
ORB. A distributed application may be made up of many small
objects, and it is unusual for all the application
developers to be sufficiently security knowledgeable to make
the right calls on the security facilities.
| Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers
How to implement the CORBA security service?
What is corba? What does it do?
What would be the most suitable ORB products when buliding a small lab for evaluating, testing and implementing security functions in a CORBA system?
Explain are the different threading models that can be used within corba servers?
Does corba define high level application architectures?
Can corba application be tuned for better performance?
Tell me can corba application be multi-threaded?
Can corba application be multi-threaded?
Does the existing Authorization Service of CORBASec scale in a "well" distributed-object environment?
Explain some reason to avoid the development of multi-threaded corba application?
Explain can corba allow servers to cause client side events or notifications?
What is corba good for?
Compare CORBA security with security of other distributed object computing frameworks such as Java RMI or DCOM?
Is there a set of UML diagrams for the CORBASEC Specification?
What are the reason to implement a corba application with multi-threading?
