net和java安全功能比较（.net和java安全功能比较）.docVIP

net和java安全功能比较（.net和java安全功能比较） .NET and JAVA security functions ZDNet software channel time: 2008-08-04 Author: | I want to comment () Keywords in this article:.Net Java Security In cryptography, there is little difference between JAVA and.NET; in terms of communication protection, JAVA offers more options than.NET; however, in WEB service security, JAVA is significantly behind.NET. The two platforms are configured through XML or plain text files, and the difference between the two platforms is the way in which the security configuration system is handled. The first part is security configuration and code encapsulation Security configuration The two platforms are configured through XML or plain text files, and the difference between the two platforms is the way in which the security configuration system is handled. On the.NET platform, there are two ways to modify the security configuration parameters with graphical interfaces and command lines. Mscorcfg.msc is a graphical interface, and Caspol.exe provides command line methods for batch processing or for configuring text. The Java platform provides only the graphical interface tool policytool.exe. Unlike.NET, the name and location of its target object (configuration file) is not fixed. .NET defines a wide range of security profiles: system wide, native scope, and this user range. When the configuration conflicts, in principle, small range parameters have priority. The core configuration files for Java and J2EE are kept in a fixed location, but the extended configuration file varies with the manufacturer. Code encapsulation: Verification Both Java and.NET Common LibraryRuntime (CLR) implement memory security or type safety protection mechanisms, and the security of applications developed on these platforms is also verified. Their implementation mechanisms vary widely. In.NET, CLR always executes compiled code, which does not interpret the code. But before the intermediate language (IL) is compiled, the compiler wil