SpringSecurity2.0.x@authorLeo.NatureGeneratedbyFoxitPDFCreator©FoxitSoftware©FoxitSoftware©FoxitSoftware©FoxitSoftware©FoxitSoftware©FoxitSoftware“”“”“”man-in-the-middleattacksVPNIPDMZdemilitarizedzoneTCP/IPJavajavaSpringSecurity-SpringSecurityPartI,“”SpringSecurityPartII,“”SpringSecuritywebOWASP©FoxitSoftware“”“”SpringSecuritySpringSecurityInternetEngineeringTaskForceSpringSecuritySpringSecurity•HTTPBASICauthenticationheaders(IEFTRFC)•HTTPDigestauthenticationheaders(IEFTRFC)•HTTPX.509clientcertificateexchange(IEFTRFC)•LDAP()•Form-basedauthentication()•OpenIDauthentication•ComputerAssociatesSiteminder•JA-SIGCentralAuthenticationService(CAS)•TransparentauthenticationcontextpropagationforRemoteMethodInvocation(RMI)andHttpInvoker(Spring)GeneratedbyFoxitPDFCreator©FoxitSoftware•Automaticremember-meauthentication()•Anonymousauthentication()•Run-asauthentication()•JavaAuthenticationandAuthorizationService(JAAS)•ContainerintegrationwithJBoss,Jetty,ResinandTomcat()•JavaOpenSourceSingleSignOn(JOSSO)*•OpenNMSNetworkManagementPlatform*•AppFuse*•AndroMDA*•MuleESB*•DirectWebRequest(DWR)*•Grails*•Tapestry*•JTrac*•Jasypt*•Roller*•ElasticPlath*•AtlassianCrowd*•()(*)ISVs,independentsoftwarevendorsSpringSecuritySpringSecuritySpringSecurity“”SpringSecurityHTTPSSpringSecurity“”jcaptchaSpringSecuritywebServletwebEJBSpringSecurity1.2.SpringSecurity2003“springacegi”SpringspringSpringSpring2003sourceforgeGeneratedbyFoxitPDFCreator©FoxitSoftware“SpringSecurity”SpringSecuritySpringSecurity1.3.springSecurityapache“..API”1.4.SpringSecuritysubversionsubversion:.GeneratedbyFoxitPDFCreator©FoxitSoftware[1]XMLSpringSourcespringsecuritysecuritybeanssecurityGeneratedbyFoxitPDFCreator©FoxitSoftware•Web/HTTP-beanURL•-•AuthenticationManager-•AccessDecisionManager-webspringbean•AuthenticationProviders-bean•UserDetailsService-bean2.2.web2.2.1.filterGeneratedbyFoxitPDFCreator©FoxitSoftware©FoxitSoftware©FoxitSoftware©FoxitSoftware“”2.2.3.applicationcontextLDAPLDAPLDAPSpringSecurityapplicationcontextmyUserDetailsServiceGeneratedbyFoxitPDFCreator©FoxitSoftware“”2.2.3.1.SHAGeneratedbyFoxitPDFCreator©FoxitSoftware**HTTPShttp,httpsanyanyHTTPHTTPSHTTPHTTPSGeneratedbyFoxitPDFCreator©FoxitSoftware©FoxitSoftware“”Table2.1.CHANNEL_FILTERGeneratedbyFoxitPDFCreator©FoxitSoftware©FoxitSoftware