Sams Teach Yourself J2EE™ in 21 Days, Second Edition

Security Terminology

Security has many aspects that can be categorized into the following areas:

• Authentication

• Authorization

• Confidentiality

• Integrity

• Non-repudiation

• Auditing

Each of these categories is discussed in this section.

Authentication

Authentication means identifying a client as a valid user of the system. Identifying a client has two components:

• Initially confirming the client's identity

• Authenticating the client each time it accesses the application

At its simplest level, initial identification requires a user to simply register with an application without any additional identification. More often, a third party, such as the Human Resources department or manager in a company, identifies a user. At its most complex level, usually associated ...