本教程以对Web应用程序安全性的概述开始。
This tutorial starts with an overview of Web application security.
管理和应用程序安全性需要启用，以实施安全角色。
Administrative and application security needs to be enabled in order for security roles to be enforced.
与配套应用程序安全性不同的服务安全性需求。
Security needs of services differing from the supporting applications security.
这要求启用应用程序安全性和创建J 2 C身份验证别名等。
This requires enabling application security and creating J2C authentication aliases and so on.
本节中的示例将关注一个没有启用管理或应用程序安全性的环境。
The examples in this section will focus on an environment without administrative or application security enabled.
为强制实施安全性，需要同时启用管理和应用程序安全性。
Administrative and application security both need to be enabled in order for security roles be enforced.
在任何语言跟平台中，资料过滤是网页应用程序安全性的基础。
Data filtering is the cornerstone of web application security in any language and on any platform.
另一个重要特性，尤其是测试应用程序安全性所需的，是工具栏的Forms部分。
Another great feature, especially for testing the security of an application, is in the Forms section of the toolbar.
有时，需要分离servlet和ejb容器，比如出于应用程序安全性考虑。
Sometimes there is a need to separate the servlet and EJB containers, such as for application security.
本文将使用示例代码来演示击键力学如何在验证及连续数据输入环境中增强应用程序安全性。
This article USES example code to demonstrate keystroke dynamics for enhancing the security of your applications in authentication and continuous data entry contexts.
特别是我的网站，它提供一些应用程序安全性基本知识的概要性概述，不过，有些内容是过时的。
In particular, my Web site provides a high-level, if somewhat dated, overview of the basics of application security.
除了在管理方面利用应用服务器的安全性之外，强烈建议在应用程序安全性方面利用它。
In addition to leveraging the application server's security for administration, it is strongly recommend that you leverage it for application security.
分析了ASP应用程序的安全性需求，提出了增强ASP应用程序安全性的若干对策。
By analyzing the requirements about the safety of ASP application program, the author puts forward some countermeasures about building up safety of ASP application program.
随着智能手机和类似设备的崛起，web应用程序安全性已经扩展到包括移动应用程序。
With the rise of smart phones and similar devices, web application security has been broadened to include mobile applications.
如果您愿意，也有指导操作可帮助您执行常见任务，例如创建数据源、启用J2EE应用程序安全性。
If you prefer, there are also guided activities to help you perform common tasks, such as creating a data source, enabling J2EE application security, and so on.
而保证应用程序安全性的最可靠的方法之一就是使应用程序工作，这样用户才会理解它的运作。
One of the surest ways to protect the security of an application is to make it work so that users understand its operation.
云应用程序安全性会对特定的特征产生重大影响：多租户、并行性和松耦合性都会增加安全性需求。
Cloud application security impacts certain characteristics strongly: Multi-tenancy, parallelism, and loose coupling introduce additional security needs.
我们将说明当前在J2ME平台上可用的应用程序安全性模型，以及该平台对于一些可预料未来趋势的适用性。
We'll explain the current application security models available on the J2ME platform, as well as the platform's suitability to some predictable future trends.
虽然这两个术语代表的是不同的含义，但出于它们在应用程序安全性方面各自的角色考虑，它们有时会被交换使用。
Though the two terms mean different things, they are sometimes used interchangeably because of their respective roles in application security.
引入了签名卡的概念，重点从简化pki布置难度和增强应用程序安全性的角度，提出了自己的解决方案。
With the support of signature card, gives the adaptive solutions to lessen the difficulty of the employment of PKI and gain the security of application based PKI.
虽然JAAS是迈向安全Web应用程序坚实的第一步，但是如果没有安全传输，那么应用程序安全性仍然是不完整的。
While JAAS is a solid first step toward a secure Web application, application security isn't complete without secure transport.
本文将向您展示在创建CommunityEdition提供的安全领域时所需的内容，以及如何使用它们来配置Web应用程序安全性。
This article will show you what is required to create the security realms provided by Community Edition and how to use them to configure Web application security.
本文说明了如何在CommunityEdition内部运行所需的基础结构，以及如何使用这些安全领域来配置Web应用程序安全性。
This article illustrated how a desired infrastructure can be run within Community Edition, and how to configure Web application security using these security realms.
DSS在电子商务和其他Web应用程序安全性方面扮演着重要角色，它可以确保在交换并从存储中检索应用程序时Web数据的可靠性。
DSS plays an important role in the security of electronic commerce and other Web applications by assuring the authenticity of Web data when applications are exchanged and retrieved from storage.
reflectedXSS攻击利用了Web应用程序安全性低的弱点，该应用程序在浏览器中显示输入参数而不对其中是否存在活动内容进行检查。
A reflected XSS attack exploits vulnerable Web applications that display input parameters back to the browser without checking for the presence of active content in them.
根据安全软件开发的最佳实践，遵守一致的编写和[missingword]策略实现应用程序安全性(请参阅参考资料中apache的优秀Web服务列表)。
Follow a consistent written and [missing word] strategy toward application security based on secure software development best practices (see Apache's excellent list for Web Services in Resources).
最后，您需要在WebSphereApplicationServer中启用应用程序安全性，并将您的用户添加到愿望列表的administrator组。
Finally, you need to turn on application security in WebSphere application Server and add your user to the wish list's Administrator group.
购入Postini四年后，直到今年7月谷歌才决定在Gmail中运用Postini电子邮件安全技术，分析人士称此举是谷歌提高企业用户应用程序安全性的重大步骤。
Four years since its purchase, Google decided this July to use Postini email security features in Gmail, which analysts touted as a major step in bolstering Google Apps security for enterprise.
我发现，如果把追踪应用程序作为家庭公认的提高安全性的工具，而不是作为一个用于监视的秘密工具，那么青少年会更容易接受它。
I've found teens are more acceptable to tracking app when it is included as part of a family agreement to improve safety than when it is placed as a secret tool to watch them.
这也就是说，处于各技术级的开发人员都必须为整个应用程序的安全性负起自己应付的责任。
That said, developers at every level of the technology stack must take personal responsibility for the security of the entire application.
应用推荐