1、 本科毕业论文 外文文献 及 译文 文献、资料题目： Core Java Volume IIAdvanced Features 文献、资料来源： 著作 文献、资料发表（出版）日期： 2008.12.1 院 （部）： 计算机科学与技术 学院 专 业： 网络工程 班 级： 网络 082 姓 名： 刘治华 学 号： 2008111242 指导教师： 许丽娜 翻译日期： 2012.5.10 山东建筑大学毕业论文 外文文献 及译文 - 1 - 外文 文献 ： Core Java Volume II Advanced Features When Java technology first appeared
2、 on the scene, the excitement was not about a well-crafted programming language but about the possibility of safely executing applets that are delivered over the Internet (see Volume I, Chapter 10 for more information about applets). Obviously, delivering executable applets is practical only when th
3、e recipients are sure that the code cant wreak havoc on their machines. For this reason, security was and is a major concern of both the designers and the users of Java technology. This means that unlike other languages and systems, where security was implemented as an afterthought or a reaction to
4、break-ins, security mechanisms are an integral part of Java technology. Three mechanisms help ensure safety: Language design features (bounds checking on arrays, no unchecked type conversions, no pointer arithmetic, and so on). An access control mechanism that controls what the code can do (such as
5、file access, network access, and so on). Code signing, whereby code authors can use standard cryptographic algorithms to authenticate Java code. Then, the users of the code can determine exactly who created the code and whether the code has been altered after it was signed. Below, youll see the cryp
6、tographic algorithms supplied in the java.security package, which allow for code signing and user authentication. As we said earlier, applets were what started the craze over the Java platform. In practice, people discovered that although they could write animated applets like the famous nervous tex
7、t applet, applets could not do a whole lot of useful stuff in the JDK 1.0 security model. For example, because applets under JDK 1.0 were so closely supervised, they couldnt do much good on a corporate intranet, even though relatively little risk attaches to executing an applet from your companys se
8、cure intranet. It quickly became clear to Sun that for applets to become truly useful, it was important for users to be able to assign different levels of security, depending on where the applet originated. If an applet comes from a trusted supplier and it has not been tampered with, the user of tha
9、t applet can then decide whether to give the applet more privileges. 山东建筑大学毕业论文 外文文献 及译文 - 2 - To give more trust to an applet, we need to know two things: Where did the applet come from? Was the code corrupted in transit? In the past 50 years, mathematicians and computer scientists have developed s
10、ophisticated algorithms for ensuring the integrity of data and for electronic signatures. The java.security package contains implementations of many of these algorithms. Fortunately, you dont need to understand the underlying mathematics to use the algorithms in the java.security package. In the nex
11、t sections, we show you how message digests can detect changes in data files and how digital signatures can prove the identity of the signer. A message digest is a digital fingerprint of a block of data. For example, the so-called SHA1 (secure hash algorithm #1) condenses any data block, no matter h
12、ow long, into a sequence of 160 bits (20 bytes). As with real fingerprints, one hopes that no two messages have the same SHA1 fingerprint. Of course, that cannot be truethere are only 2160 SHA1 fingerprints, so there must be some messages with the same fingerprint. But 2160 is so large that the prob
13、ability of duplication occurring is negligible. How negligible? According to James Walsh in True Odds: How Risks Affect Your Everyday Life (Merritt Publishing 1996), the chance that you will die from being struck by lightning is about one in 30,000. Now, think of nine other people, for example, your
14、 nine least favorite managers or professors. The chance that you and all of them will die from lightning strikes is higher than that of a forged message having the same SHA1 fingerprint as the original. (Of course, more than ten people, none of whom you are likely to know, will die from lightning st
15、rikes. However, we are talking about the far slimmer chance that your particular choice of people will be wiped out.) A message digest has two essential properties: If one bit or several bits of the data are changed, then the message digest also changes. A forger who is in possession of a given mess
16、age cannot construct a fake message that has the same message digest as the original. The second property is again a matter of probabilities, of course. Consider the following message by the billionaire father:Upon my death, my property shall be divided equally among my children； however, my son George shall receive nothing. That message has an SHA1 fingerprint of
