Maintained and edited by
Konstantin Beznosov
June 18, 1999
I could not find an answer to my question here, where else can I ask my question?
What is SecSIG?
Who contributed to this FAQ?
What magazine publications describe, review, compare, critique
CORBASEC?
Are there any papers or articles that compare CORBA security with
security of other distributed object computing frameworks such as Java RMI or
DCOM?
Where can I get a tutorial about CORBASEC?
Is there any group or lab research on CORBA security service?
Is there a set of UML diagrams for the CORBASEC Specification?
What are the shortcomings of CORBA Security service?
What about CSI with SSL?
What is the validity of a context?
Are the any interfaces specified in CORBASEC for controlling security
context by security-aware applications?
How to come up with application security design using CORBA Security
service?
How does a security-aware application specify the use of a specific
algorithms for supporting communication confidentiality and integrity?
How is related work at OMG on Security Administration and Common
Management Facilities ?
What is the granularity of access control on object invocations?
Where are access control lists stored?
How do servers ``know'' what domain to put new objects into and when to create
new security policy domains?
What about transient objects created by factories?
How would access control mechanisms be applied to secure, let's say, naming
service?
Where can I find some source code which implementation Security
Service?
Is there any document on how to implement the CORBA security service?
If I want implement the CORBA security service, what should I do?
Does the existing Authorization Service of CORBASec scale in a
"well" distributed-object environment?
What is the "public" security attribute of a principal?
Under what circumstances do Credentials contain the ``public'' attribute?
What is the value and the defining authority of the ``public'' attribute?
Where can I find an implementation of Security Services ?
Where can I find exactly what product implements what Security
level and options?
What ORBs claim to have ``security'' functionality?
Is there any free/trial/evaluation version of an ORB with Security
Service for Java?
What would be the most suitable ORB product(s) when buliding a
(very) small lab for evaluating, testing and implementing security functions
in a CORBA system?
Are CORBAsec implementations from the US generally subjected to
export control?
What is the conformance level of OrbixSecurity?
Where do I start from in order to use OrbixSecurity?
Can we use Orbix security to provide Access control at Object instance
level?
Is there a free implementation of CORBA SSL service that will work
with VisiBroker 3.* for Java?
Does the SSL-certificate certify the server or the object?