How do I make a "security environment"?

I need to do something I don't even know if is possible..
We have a code that handle crypted data, and we have another software that is open source and need to manipulate this data, both are desktop stand alone softwares.
I'm wondering, is there a way to create a "secure environment" to use the open source software as a plugin, restricting this software's access do external world (I don't want it to externalize my decrypted data)?
Any help would be appreciated.

You can install a home grown SecurityManager in your main application. Whatever security policy you define for that SecurityManager will apply to plugins and libraries. You can forbid socket access, file access, system properties etc etc.
You have a steep learning curve. A starting point is [http://java.sun.com/docs/books/tutorial/security/tour2/step2.html|http://java.sun.com/docs/books/tutorial/security/tour2/step2.html].

Similar Messages

How do you make a secure pdf form editable?

How do you make a secure pdf file editable?

The best way is to apply a digital signature to the file. Any other way can
be manipulated quite easily.

How do I make a security email

Help

http://support.apple.com/kb/HT5620
Manage your Apple ID primary, rescue, alternate, and notification email addresses
If you forgot your security question answers then you have to:
Forgotten Security Questions/Answers
You need to contact Apple by:
1 - Use the Express lane and start here:
https://expresslane.apple.com
then click More Products and Services>Apple ID>Other Apple ID Topics>Forgotten Apple ID security questions.
or
Apple - Support -form iTunes Store - Contact Us
2 - Call Apple in your country by getting the number from here:
http://support.apple.com/kb/HE57
or
Apple ID: Contacting Apple for help with Apple ID account security
3 - Use your rescue email address if you set one up
Rescue email address and how to reset Apple ID security questions
For general information see:
Apple ID: All about Apple ID security questions

How do I make checkout secure?

I want my customers to have to be logged in to be able to check out. I am not proficient in javascript so if this is a solution I will need help with the actual code, and where I will put it.
There was a discussion I found from July 17th, however, there were not enough details for me to be able to make the checkout secure.
The discussion was 4605582#4605582
I would appreciate any ideas and detailed help on this one.
Thank you
Nancy

Liam,
I appreciate you getting back to me.
I miss spoke. I should have written secure zone. I do know that the whole BC site is secure and runs through https.
Let me describe what I want to have BC do during checkout. There are two parts.
Part 1:
I would like the customers approaching checkout to only see the checkout page after they have logged in. So basically they would be forced to sign-up, or login in before filling out the checkout form.
Part 2:
I would like as many fields of the customer's data to propagate into the checkout fields (once they are logged in) as possible.
I am seeing discussions about these two issues on the forum. Someone mentioned using JavaScript to direct the user to register or login once they hit the checkout button. When I asked them for details, they are directing me to a paid subscription where I can get the how-to. This discussion is here http://forums.adobe.com/message/4581173. I took part in the discussion as well as sent a private message to both participants.
Another discussion mentions a link that will show where to put tags in the checkout fields, however I cannot get to this link.
WHAT I NEED:
To solve #1:
A best solution and actual code that I can place to redirect the user to sign-up or login.
The place where I should put this code.
To solve #2:
Where I can find the tags, if this is the correct term, to place in the fields of the checkout form, to propagate customer data such as first name, last name, email address, etc. into the checkout form fields.
Unfortunately I am not good at writing JavaScript so I would need this actual code, if you believe this is the best solution to this.
I just dug, after I wrote the previous sentence, and found a page that I hadn't seen before. It is: http://kb.worldsecuresystems.com/539/cpsid_53900.html#main_Customize_the_registration_form
I will read this and hopefully this will help me as well.
Thanks again,
Nancy Rodger

How to sending login information securely to the backing bean?

The login page to one of my customer product resides on a webserver which will issue a redirect to the ADF application in another webserver passing the username and password. This they are implementing using URL Invoke allowed Bunded task flow. How can they make parameters secure?
Thanks,
Vanamala

I hope you are looking for securing the username and password before invoking the request.
At the caller application, Encrypting the credentials before redirect, and Decrypting them at the second application might solve your need.
In the Second app, by using the taskflow intializer or bean method as the default activity we can decrypt the user credentials and validate.
Hope this helps.
Thanks,
Srini.

Make it secure

I have created a Oracle Form.
I transfered this form onto Oracle Apps Server.
Its working fine.
This is a simple FORM.
Functionality of the user_unlock FORM is as follows:
Its allows user to unlock account.
This FORM base on all_users table.
when user run this form.
First user need to serach the name on
enter the name in the text field.
when user clicks on the button its unlock the user account.
I have wrote a procedure in my database.
execute this procedure on when_button_pressed trigger.
For this process make little secure.
I have created a user abc with create session privileges.
I have granted above procedure to the new user.
I add one database logon FORM in this process as below:
Now our non-oracle help desk user browse the url.
database logon FORM popup,
all username/password/strings values are already there.
They need to click on logon button will bring unlock FORM.
And helpdesk user will unlock the account.
Here are my worries:
What is to prevent someone from unlocking the privileged accounts that have
well known default passwords that are now shipped as locked?
The search facility makes it possible for a hacker to l
earn all the usernames on the database with a wildcard search.
How can I make it secure?
DN

DN, you asked this before I answered it.
Re: How to give limited privileges to the user to perform required duties?
If you don't like that answer, please say so and why. Another alternative you might consider if you don't have an application user table and must use ALL_USERS is to create a role for your application and grant that role (without admin) to your application users. You can then join ALL_USERS with USER_ROLE_PRIVS in your block and eliminate all but the users of your application.

How can I Remove Firefox Hello in a high-security environment?

Hi,
After a recent Firefox update in a test environment for a high-security environment (I'm not at liberty to disclose the nature of this environment, sorry. Let's just say we have to disable Firefox from contacting Mozilla's servers and further disable Google's "Safe Browsing" due to possibility of inadvertent unauthorized disclosure) We have noticed a feature: "Firefox Hello", this feature causes Firefox to violate strict policy as it transforms it from being classified as strictly a "Web Browser" (which is permitted) to a "Chat Application", all of which are completely banned. Simply disabling Hello is not a sufficient option as Firefox still contains the code to run Hello, which still constitutes it a "Chat Application" as per policy. We have the capability to edit out unauthorized code from open source software internally, but we don't know where to start to remove this code from the Firefox codebase as Hello seems pretty well integrated.
Currently I only have two options, both of which do not please me as for me personally, (I really like Firefox and have fought to include it in any environment I can):
1. Discontinue permanent use of Firefox.
2. Discontinue updating Firefox permanently or until Hello is removed as a non-modular element. This is unacceptable as it'd mean we can't keep it secure, which causes us to fall back to (1).
I would graciously like any third option. Internet Explorer seems to be the only browser that provides sufficient enterprise-level control without extraneous features at the moment with the addition of Hello to Firefox. We have banned Chrome from our environment due to how tightly bound it is with Google's "Cloud" services and hope that Firefox isn't becoming a "Cloud" browser for Mozilla, Sync has already placed Firefox under the microscope as it is.
Thank you.

We have WebRTC traffic blocked (We have a setup that audits SSL traffic before it leaves or enters the network).
Our primary issue with Hello is that policy classifies the actual code used to run it as being very much like an Easter Egg, code that was inserted that goes beyond the spec of being a web browser and thus difficult to audit. It's easy to block services in general, but when an a single unauthorized service becomes a core feature and has code strapped to the browser, that throws up red flags that Mozilla is moving Firefox away from being a organization-managable browser and more toward an exclusively mozilla-managed "Cloud" browser, where there is a possibility that Mozilla will seek more control over user experience that will increase attack surface.
It's reasons like this we decline to install Chrome into our environment, because Google has several services built-in to the core of their browser and do not leverage their extensions capabilities, but rather mandates that these features "must be installed" and that users can only toggle them off.
It's easy to uninstall an extension or to recompile with a flag, but it's hard when a vendor makes decisions for you and tells you "This is good for you, you must embrace it" irrespective of policy of organizations or even individual users wishes.
Thank you all for this information, it will help our future audits and help determine if Firefox is right for our needs.
Unfortunately I can't mark this thread as "Solved" since the root issue is still not solved (Mozilla's development practices making something that should be an extension, a core aspect of the browser), so marking it solved would be a lie. But thank you both nonetheless.

I forgot my Apple ID security question answers and cannot contact iTunes support by phone. The only way I can ask for help is via email. How can I make that happen?             Thanks

Hi! So I haven't used iTunes in a few months but I just got an iTunes gift card and want to make a purchase. iTunes redeemed it just fine but now that I want to make a purchase I am having problems. I can't remember my security question answers and iTunes is requesting them. I have two other verified emails but the are NOT rescue emails. I can't contact iTunes over the phone because my phone lines are out and are going to be out for a long time. The only way I can contact them is by email. How can I do this? Is there an easy way to just reset all my security questions? Please help a girl out. I just want my music!
Thanks so much

Alternatives to Reset Security Questions and Rescue Mail
     1. Apple ID- All about Apple ID security questions.
     2. Rescue email address and how to reset Apple ID security questions
     3. Start here to find your country, and how you can contact Apple:
         Apple ID- Contacting Apple for help with Apple ID account security.
     4. Fill out and submit this form. Select the topic, Account Security.
     5. Call Apple Support in your country and ask to speak to Account Security.
          Customer Service: Contacting Apple for support.
How to Manage your Apple ID: Manage My Apple ID

How to open -pdf in a secure environment

Opening PDF files from a secured account on Internet (e.g. telephone billing info) does not work. in Safe as the file is shown as _pdf (underscore instead of dot). We suspect this problem started after installing CS6, but are not sure. Win 7, IE 9, Reader XI

PDF on a regular website can be opened and downloaded. However, PDF on a secure website (https) looks normal with normal icon but double click gives screen for open / save / save as. ‘Open’ gives no result, no error message either. ‘Save’ or ‘save as’ shows screen with filename ending on _pdf, which cannot be opened or saved, no error messages either. Changing the filename into .pdf gives the same reaction: nothing happens, no error messages.
The same files can be opened on a different PC win7, IE9, Reader XI and similar software, but without CS6.
Van: Pat Willener [email protected]
Verzonden: 3 november 2012 5:19
Aan: EllyHo
Onderwerp: how to open -pdf in a secure environment
Re: how to open -pdf in a secure environment
created by Pat Willener <http://forums.adobe.com/people/pwillener> in Adobe Reader - View the full discussion <http://forums.adobe.com/message/4820274#4820274

I already have an account but i need to make a resuce email..how do i make a rescue email and reset my security answers. I can't remember my security question answers!!

I need help!! My I-tunes won't let me buy any more songs until I confirm that my account..is well..MY ACCOUNT! I can't remeber my security question answers, how do I reset them!? I also need to make a rescue email, i didn't make one when i first made my account, so how do i make it now!? PLEASE HELP ME!

You need to ask Apple to reset your security questions; ways of doing so include clicking here and picking a method for your country, and filling out and submitting this form.
Creating a rescue email requires correctly answering two of the questions.
(96131)

I forgot my security questions for iTunes... How can I make purchases on iTunes?

I created my apple ID account about 5 years ago when I was in high school. I just bought a new mac and iTunes won't allow me to make purchases without answering security questions. Is there any way that I can get the answers to the security questions sent to my email?

Alternatives for Help Resetting Security Questions and/or Rescue Mail
     1. If you have a valid rescue email address, then use this procedure:
         Rescue email address and how to reset Apple ID security questions.
     2. Fill out and submit this form. Select the topic, Account Security. You must
         have a Rescue Email to use this option.
     3. This is the only option if you do not already have a valid Rescue Email.
         These are telephone numbers for contacting Apple Support in your country.
         Apple ID- Contacting Apple for help with Apple ID account security. Select
         the appropriate country and call. Ask to speak to the Account Security Team.
     4. Account security issues almost always require you to speak directly to an
         Apple representative to securely establish your identity as the account holder.
         You can set it up so that Apple calls you, either immediately or at a time
         convenient to you.
            1. Go to www.apple.com/support.
            2. Choose Contact Support and click Contact Us.
            3. Choose Other Apple ID Topics and choose the appropriate topic for
                your issue.
            4. Follow the onscreen instructions.
         Note: If you have already forgotten your security questions, then you cannot
         set up a rescue email address in order to reset them. You must set up
         the rescue email address beforehand.
Your Apple ID: Manage My Apple ID.
                        Apple ID- All about Apple ID security questions.

How to make adf security?

Dear all
How to make adf security?
I am new adf security.
I'm facing security issue. Now i need to secure me application (User, Group, Role etc...)
Oracle recommend me use WebLogic internal LDAP or OID. How to manage User, Group, Role deploy after?
Thanks Lhagva

Hi,
once you deployed an application, users and roles are no longer in the domain of ADF Security. So the administration is
WLS console - if users and groups are in the WLS LDAP
Identity Management - if users and roles are in OID, RDBMA, Active Directory etc.
Enterprise Managers - to manage application roles and granting permissions or application roles to enterprise groups
Frank

HT4283 How can I make my pages docs created on my iPad totally private and secure? I am a psychotherapist.

How can I make my Pages doc on my iPad totally private and secure?
<Email Edited by Host>

No.

When I enter my password to purchase a song, I need to create new security questions. Whenever I finish making thm and submit them, a box says "An error has occurred. We could not save your changes." How do I make it go away?

When I enter my password to purchase a song, I need to create new security questions. When I finish writing them out and I hit submit, a box comes up with the words: "An error has occurred. We could not save your changes." What does that mean and how do I make it go away?

Potentially the issue may be the combination of actual distance and the presence of any Wi-Fi interference at the location of the AirPort Express that may be the culprit here. The bottom line is you would want the Express to be within a 25+ dB range of the Extreme to be sure that it can consistently stay connected to it.
For more details on proper base station placement, check out the following AirPort User tip. Please post back your results.

How do I make AJAX work in WSRP environment

I had a single weblogic portal server running for our portal application. We have a portlet is using AJAX. The JSP has 2 drop down box. Based on value in first drop down box populate second drop down box values using AJAX.
With redesign we implemented WSRP approach for some portlets. Our question is how do I make AJAX portlet work in WSRP environment. The values for second drop down box should come from producer side. Hence request should pass thru consumer side. Here is the function to invoke AJAX function
function getServicesFromBackend()
     var urlPart = "/dpportal/com/serviceone/sip/ui/service/getService.do?SERVICE_FINDER_SELECTED_OPTION="+selectedCategory+"&PORTLET_INSTANCE_LABEL=servicefinder";
     var protocol = window.location.protocol;
     var host = window.location.host;
     var port = window.location.port;
     var url = protocol + "//" + host + urlPart;
     initRequest(url);
     req.onreadystatechange = processReq;
     req.open("GET", url, true);
     req.send(null);
How do i change this function to invoke producer action properly?

Can you pls help me understand on this.
I opened BEA on this earlier. Here is the response.
There is no WLP81x support for AJAX at this point, Though you might use it in your application if it works for you. Having said that, Ajax over WSRP 1.0 which is the WSRP specs for 8.1x does not support the Ajax requests over WSRP. A more detailed article can be found at http://www.subbu.org/weblogs/main/2006/02/portlets_and_aj.html
Response from DRE
As i mentioned to you earlier, Support can only help troubleshoot an issue for a certified use case. Ajax is not certified on WLP 8.1x lines, although there is nothing we do to prevent you from using Ajax. Also mention to Subbu that you are on WLP 8.x , where the WSRP spec is 1.0. If there is something he can help he will answer through the forum.

How do I make a "security environment"?

Similar Messages

Maybe you are looking for