使用密钥对.ppt

Session: Essentials of Application Security应用系统安全内幕 钟卫 微软公司 Session Overview 概述 The Importance of Application Security 应用系统安全的重要性 Secure Application Development Practices 开发安全的系统的实践 Security Technologies 可用的安全技术 Secure Development Guidelines 开发安全应用的指导 Session Prerequisites 课程的要求 Development experience with MicrosoftVisual Basic?, Microsoft Visual C++?, or C# 在Visual Basic?, Microsoft Visual C++?, or C#有实际的开发经验 Internet user experience Internet 用户 The Importance of Application Security应用程序安全的重要性 The Importance of Application Security 应用系统安全的重要性 Secure Application Development Practices 开发安全的系统的实践 Security Technologies 可用的安全技术 Secure Development Guidelines 开发安全应用的指导 Trustworthy Computing 可信计算 “Trustworthy Computing has four pillars: Reliability means a computer system is dependable, is available when needed, and performs as expected and at appropriate levels. Security means a system is resilient to attack, and the confidentiality, integrity, and availability of both the system and its data are protected. Privacy means that people can control their personal information and organizations that use the information faithfully protect it. Business integrity is about companies in our industry being responsible to customers and helping them find appropriate solutions for their business issues, addressing problems with products or services, and being open in interactions with customers.” Common Types of Attacks 常见的攻击类型 Examples of Security Intrusions 安全侵入的例子 CodeRed ILoveYou Nimda Consequences of Poor Security 低安全级别会引发的一些问题 Stolen intellectual property 知识产权被窃取 System downtime 系统停滞 Lost productivity 系统效率低下 Damage to business reputation 损害了公司的商业信誉 Lost consumer confidence 丧失客户的信心 Severe financial losses due to lost revenue 导致严重的经济损失 Challenges When Implementing Security 我们在提高应用安全时遇到的挑战 The Developer Role in Application Security作为一个开发人员在系统安全的责任 Developers must: 开发者必须： Work with solution architects and systems administrators to ensure appl