|
|
|
|
|
|
|
Understanding the Purpose of This Subsystem |
|
|
|
|
|
|
|
|
The Workgroup and Security Subsystem enforces the security of your application and makes sure that users are only able to do the business tasks they are supposed to do. The Security classes manage security with an encryption algorithm based on the masterful SHA-1 encryption algorithm based on the National Institute of Standards and Technology and implemented in VB5 by Ken Miller. The code is modified here to be encapsulated in objects for better maintainability and reusability. |
|
|
|
|
|
|
|
|
Note
For more information on the National Institute of Standards and Technology, visit its Web site at http://www.nist.gov. Ken Miller's code was presented in the February 1998 issue of the Visual Basic Programmer's Journal. |
|
|
|
|
|
|
|
|
|
The topic of workgroup design and administration is quite complex and has filled several books and dozens of papers. In this chapter, you learn the basics of workgroup structure and simple workflow concepts, complete with classes that correspond to the Second Bank of Carrollton example. |
|
|
|
|
|
|
|
|
You might avoid staying up all night trying to figure out a 100% foolproof algorithm for solving all of the world's corporate network security concerns. As long as humans remain imperfect, we can't totally rid the Internet world of every virus problem for every computer system. Numerous cookbooks are uploaded to the Web on a regular basis that teach people how to put together a devastating, undetectable virus. Just as there are not perfect antivirus solutions, there are not perfect viruses, as well. Viruses are versatile, and their authors know how to plant them on any programmable machine. Computers that have applications that can interact with and even modify other applications are vulnerable to viruses. These viruses can easily spread between different users' applications. As you've probably already guessed, no computer is safe. That's the reality. |
|
|
|
|
|
|
|
|
|
You should keep users' access to server system programs by implementing access controls. Using such controls at every access checkpoint helps to confine virus opportunities to the time window of user authorization. Keep in mind, though, that the broader the access control implementation, the higher the cost of that security policy. Antivirus software helps somewhat but is not always successful, nor is it nearly mathematically perfect. |
|
|
|
|
|