CBK#4 Applications & Systems Development Security - Page 7

CBK#4 Applications & System Develop. - Page 1 2 3 4 5 6 7 8 9

Data Structures:
Data Structure:
Is a representation of the logical relationship between elements of data.
Cohesive:
A cohesive module can perform a single task with little or no help from other modules
- Low Cohesion: Scatter brained, does several tasks.
- High Cohesion: Focused on one task.
The best programming uses the most cohesive modules possible, but because different modules need to pass data and communicate, they usually cannot be totally cohesive.
Coupling:
Is a measure of interconnection among modules in an application.
- Low Coupling: Promotes module independence.
- High Coupling: Depend on other modules
The lower the coupling, the better the software design, because it promote module independence. The more independent a component is, the less complex the application is and the easier it is to modify and troubleshoot.

OMA / Object Management Architecture:
ORB / Object Request Brokers:
Manages all communication between components and enables them to interact in a heterogeneous and distributed environment.
CORBA / Common Object Request Broker Architecture:
Provides interoperability among the vast array of different software, platforms and hardware in environments.
Enables applications to communicate with one another no matter where the application is located or who developed it. To implement this compatible interchange, a user develops a small amount of initial code and an Interface Definition Language (IDL) file.
COM / Common Object Model:
Supports the exchange of objects among programs.
DCOM / Distributed Common Object Model:
Defines the standard for sharing objects in a networked environment.
Uses a globally unique identifier, GUID, to uniquely identify users, resources and components within an environment.
ODBC / Open Database Connectivity:
Provides a standard SQL dialect that can be used to access many types of rational databases.
DDE / Dynamic Data Exchange:
Enables different applications to share data by providing IPC.
Is a communication mechanism that enables direct conversation between two applications.
DCE / Distributed Computing Environment:
Is a set of management services with a communication layer based on RPC.
Is a layer of software that sits on top of the network layer and provides services to the applications above it.
Uses universal unique identifier, UUID, to uniquely identify users, resources and components within an environment.
The RPC function collects the arguments and commands from the sending program and prepares them for transmission over the network.
The DFS / Distributed File Services provides a single integrated file system that all DCE users can use to share files.

CBK#4 Applications & System Develop. - Page 1 2 3 4 5 6 7 8 9

CISSP Summary 2002Related links | References

CBK#1 Access Control Systems & Methodology | CBK#2 Telecommunications & Network Security | CBK#3 Security Management Practices | CBK#4 Applications & Systems Development Security | CBK#5 Cryptography | CBK#6 Security Architecture & Models | CBK#7 Operations Security | CBK#8 Business Continuity Planning & Disaster Recovery Planning | CBK#9 Law, Investigations & Ethics | CBK#10 Physical Security

Contact:

E-mail: john.wallhoff@mailbox.swipnet.se
Written by: J.Wallhoff January - April 2002
Updated by: J.Wallhoff April 2002