Developer's Guide to Web Application Security

Frequently Asked Questions

The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the concepts presented in this chapter and to assist you with real-life implementation of these concepts. To have your questions about this chapter answered by the author, browse to http://www.syngress.com/solutions and click on the "Ask the Author" form.

Q

Why would I want to create my own class loader?

Q

Does the bytecode verifier check if the code has been altered?

Q

What is the difference between a message digest and a digital signature?

Q

What is the difference between a digital signature and a certificate?

Q

Can anyone with my public key claim to be me?

Q

I made a policy file and put it in the same directory as my code. Will the code now enforce the rules of the policy?

Q

Why don't I have the option of allowing or disallowing native method calls when I use a security manager?

Answers

Q

Classes your program uses are loaded automatically from the class path directory. Through object serialization, it is possible to receive objects from another source. However, what if the object needs to use or create another class that does not exist in your class path? In this case, if your program tries to use the class, it will not find it in the class path. The class will need to be loaded into the JVM using a class loader of your own.

UNLIMITED FREE
ACCESS
TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Category: I/Q Modulators and I/Q Demodulators
Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.