[Information processing technician practice] SW development security, object-oriented programming, types of programming languages, cloud computer, interaction

SW development security

SW development security, also known as secure coding, refers to a series of security activities that must be observed during the software development process, such as eliminating potential security vulnerabilities in source code, etc. for safe development, and designing and implementing functions with security in mind.

Construction methods that protect confidentiality, integrity, and availability are called the three elements of SW development security.

Confidentiality: A characteristic that prevents information disclosure and exposure due to unauthorized individuals or system access Integrity: A characteristic that ensures that data cannot be changed without following legitimate methods, and that the data is accurate and complete and has not been intentionally or maliciously altered, damaged, or destroyed Availability: A characteristic that ensures that authorized users or applications can continue to use the desired service

vulnerability

Among SW development security terms, it refers to 'a situation according to the pre-conditions for a threat to occur', and examples include 'transmission of plain text, unverification of input value, and password sharing'.

Asset: Organizational data or objects of value given by the owner of the organization Threat: Events or actions that may have a negative impact on the assets of the organization or company (hacking, unauthorized internal employees, organizations, natural disasters) Vulnerability: Weakness used to lower the information security of the system as a prerequisite for a threat to occur (transmission of clear text, non-verification of input values, password sharing) Risk: Possibility of a threat taking advantage of a vulnerability to cause loss or damage to the organization's assets

object-oriented programming

It is a programming method that abstracts the data needed for programming, creates objects with states and behaviors, and constructs logic through organic interactions between those objects.

class

In object-oriented programming, it is a type of framework that defines variables and methods to create specific objects and a unit that abstracts data.

instance (object)

It refers to something that has its own properties and can be distinguished from others among things that physically exist or can be thought of abstractly. Allocated in real memory based on what is defined in the class.

Characteristics of object-oriented programs

1. Encapsulation, information hiding

It is used in a way that hides the details of the object outside the object and interacts with the object using only simple messages, allowing children to use it by inheriting parent properties and preventing direct access to parent methods. In this way, unnecessary access can be prevented with the information hiding function. Using getters and setters is a similar concept.

2. Abstraction

The process of eliminating details focusing on important aspects rather than expressing facts as objects. In object-oriented programming, a class can be said to be a unit with the abstract properties of an object.

3. Polymorphism

Allowing various children to be created using one interface. Even if there is a common class, various child properties appear depending on the detailed properties. This is called polymorphism.

4. Inheritance

This is done through inheritance, which automatically grants the properties of the super class to the subclass. In a subclass, the process of defining abstract methods created in the superclass is required, and a subclass with various characteristics is required.

5. Relevance

It defines relationships between classes and is divided into generalization, detailing, and grouping. Indicates a relationship that cross-references data.

Generalization defines common properties as higher-level objects and specialized objects as lower-level partial objects. (is-a) Association is similar to the concept of link. (is-member-of) Classifications represent instances of objects and classes. An instance of members in an object or class defined by common properties. (is-instance-of) Grouping creates one parent object by grouping several related objects together. It is a term that represents a relationship described as a ‘part-whole’ or ‘part’ relationship. (is-part-of)

Advantages of object-oriented programs

Code reuse is easy and maintenance is easy. It is suitable for large projects because class-level modularity is possible.

Disadvantages of object-oriented programs

Processing speed is relatively slow. If there are many objects, the capacity can increase. Design requires a lot of time and effort.

Types of Programming Languages

JAVA

A programming language that can be applied to a distributed network environment, provides multi-threading capabilities so that multiple tasks can be processed simultaneously, is independent of the operating system and hardware, is highly portable, can be encapsulated, and is highly reusable.

Multithreading Generally, one process performs work with one thread, and multithreading means that two or more threads perform work simultaneously within one process. Unlike multi-process, multi-threading shares the memory of the process it belongs to. Therefore, there is less waste of resources. However, on the other hand, if only a single thread is running, the execution time may not improve and may actually be delayed.

JSP (Java Server Pages)

A server scripting language written in JAVA that can be used on various operating systems.

It is a web application tool that creates dynamic web pages by inserting JAVA code into HTML. When JSP is executed, it is converted to a Java servlet and runs on a web application server, performing necessary functions and responding to the client with the generated data along with the web page.

Servlet Java web programming technology that adheres to the implementation rules of the Servlet class that processes client requests and returns the results.

Server-side script A program on the server side that is in the form of a script. This part is not transmitted to the client, and there is a risk in terms of security, so it does not come to the client. There are Node.js, Python, PHP, ASP, JSP, etc.

ASP (Active Server Pages)

A programming language for creating pages that are dynamically executed on the server side, produced by Microsoft and executable only on Windows. It is a language that runs on a web server called IIS and is a technology that implements dynamic web pages by coding VBScript directly into HTML documents.

PHP

This is a technology that is implemented by inserting code written in PHP into an HTML document. The syntax is similar to C and JAVA. It is widely used in the field of dynamic web page development, and the PHP source code cannot be viewed on the client.

JSTL (Java Server Pages Standard Tag Library)

It allows you to use it as an alternative to Java code scriptlets in HTML. JSTL extends the JSP specification by adding a JSP tag library for processing XML data, conditional statements, and loops.

Types of JSTL tags Core tags, Function tags, Formatting tags, XML tags, SQL tags

Smalltalk

It is the first language to provide a GUI and is one of the first generation object-oriented programming languages. It is a pure object-oriented programming language.

cloud computer

Rather than placing data, software, and various computer resources on existing hardware such as a PC or smartphone owned by the user, only the necessary items can be accessed through the Internet.