Be sure to keep up with web server and application software updates, use applicable security software, require strong passwords, etc.
确保升级网站服务器和应用软件，使用应用安全软件，要求安全性高的密码等等。
If this is the case, you can be confident that the client user identity is being successfully propagated to the Web service provider application using WS-Security.
如果是这样，则可以确信客户机用户标识使用WS - Security成功传播到了Web服务提供者应用程序。
Next, you will see how the security realm created above can be used to configure security in a simple Web application.
接下来，您将看到如何使用上面创建的安全领域在简单的Web应用程序中配置安全性。
This tutorial starts with an overview of Web application security.
本教程以对Web应用程序安全性的概述开始。
This article will show you what is required to create the security realms provided by Community Edition and how to use them to configure Web application security.
本文将向您展示在创建CommunityEdition提供的安全领域时所需的内容，以及如何使用它们来配置Web应用程序安全性。
Each role must be defined in the deployment descriptor of each Web or enterprise application, and security constraints must be created to secure each authorization-controlled resource.
必须在每个Web或企业应用程序的部署描述符中定义每个角色，并且必须创建安全约束来保护每个授权控制的资源。
You can develop a Web services security policies application to allow the system administrators custom the settings for users with different roles and responsibilities.
可以开发Web服务安全策略应用程序来让系统管理员为具有不同角色和职责的用户自定义设置。
I quickly covered the steps required to run the CruiseControl Web application, but you could improve your installation's security and reliability.
我快速介绍了运行CruiseControlWeb应用程序需要的步骤，但是您可以提高自己安装的安全性和可靠性。
Figure 3 shows the security roles created for our sample Web application.
图3显示了为示例Web应用程序创建的安全角色。
Testing the security configuration for the Web application.
测试Web应用程序的安全配置。
When dealing with a Web application, the importance of data security cannot be overstated.
在处理Web应用程序时，数据安全性的重要性怎么强调也不过分。
Let's take a look at three containers, each of which is associated with a response type that you could use in describing application security vulnerability in a Web service.
让我们检查一下三种容器，其中任意一种都与您在Web服务中用于描述应用程序安全漏洞的响应类型相关。
Suffice it to say that with the introduction of the J2EE Web application security architecture, we're reaping the rewards of nearly 10 years of trial and error, and it shows.
可以说随着J2EEWeb应用程序安全体系结构的引入，我们不断从近10年的反复试验有所收获，事实也表明了这一点。
This article illustrated how a desired infrastructure can be run within Community Edition, and how to configure Web application security using these security realms.
本文说明了如何在CommunityEdition内部运行所需的基础结构，以及如何使用这些安全领域来配置Web应用程序安全性。
To learn more about the relevance of Web services to wireless application programming and security, see the Resources section.
要了解更多Web服务与无线应用程序编程和安全性之间的关系，请参阅参考资料一节。
It's extremely simple to deploy to your Web application using DWR, and DWR's security features can be integrated with a J2EE role-based authentication system.
使用DWR部署到Web应用程序极为简单，而且DWR的安全性特性可以与J2EE基于角色的验证系统集成。
The overview explains the importance of using Rational AppScan, to ensure the elimination of Web security vulnerabilities within the application development process of a public facing Web application.
概述中解释了使用RationalAppScan的重要性，即确保能够在应用程序开发过程中消除网络安全性缺陷。
Most organizations leave the discovery of Web application security issues to a dedicated security team, which tests the applications before they go live.
大多数机构将这个Web应用程序安全性问题的发现留给专注安全的小组来做，他们在这些应用程序生效之前进行测试。
Do employ the same security mechanisms for your APIs as any web application your organization deploys.
为你的API启用其它任何你的组织已部署的web应用同样的安全机制。
Shiro also supports some auxiliary features, such as web application security, unit testing, and multithreading support, but these exist to reinforce the above four primary concerns.
Shiro还支持一些辅助特性，如Web应用安全、单元测试和多线程，它们的存在强化了上面提到的四个要素。
I'll give you a comprehensive look at four feature categories: Web services, Web application, enterprise, and management and security.
我将全面讨论四个特性类别：Web服务、Web应用程序、企业应用程序以及管理和安全性。
Load balancers, distributed application servers, integrated web delivery stacks, security and managed backups are all part of every Morph AppSpace.
负载均衡、分布式应用服务器、整合Web传递栈、安全及管理备份组成了每一个Morph App Space。
To start off with, you should always run a web application security test scan against a test website.
你通常要做的是首先对要测试的站点进行web应用安全测试扫描。
To respond to these challenges, Max and his colleagues have developed Flume, an open source web application security infrastructure based on a Decentralized Information Flow Control (DFIC) model.
为了应对新挑战，Max和同事一起，以分布式信息流控制(DecentralizedInformation Flow Control, DIFC)模型为基础，开发了开源web应用安全基础设施flume。
The sample application uses a database-based security realm, and you must install the realm before you install the Web application.
这个示例应用程序使用一个基于数据库的安全域，在安装Web 应用程序之前必须安装这个域。
While the OWASP Top Ten list, presented by InfoQ, focuses on web application security risks, the CWE Top 25 covers a broader range of issues including the famous buffer overrun vulnerability.
曾在InfoQ中发布过owaspTop10列表，它所关注的是web应用程序的安全风险，而CWE的Top25的覆盖范围更广，包括著名的缓冲区溢出缺陷。
With the rise of smart phones and similar devices, web application security has been broadened to include mobile applications.
随着智能手机和类似设备的崛起，web应用程序安全性已经扩展到包括移动应用程序。
As mentioned earlier, with a DWS application, you get to take advantage of the mature J2EE infrastructure, and you can apply the same security policies that would apply to any Web application.
如前所述，在DWS应用程序中，可以利用成熟的J2EE基础设施，并且可以像任何Web应用程序那样应用相同的安全策略。
This question has been haunting the web application security field for quite some time and rest assured that no one will ever give you a definite answer.
这个问题总是在web应用安全领域被提出，也总是没有人能给出一个确切的答案。
This question has been haunting the web application security field for quite some time and rest assured that no one will ever give you a definite answer.
这个问题总是在web应用安全领域被提出，也总是没有人能给出一个确切的答案。
应用推荐