IARC-CSU / CanReg5

CanReg5 is a multi user, multi platform, open source tool to input, store, check and analyse cancer registry data.
http://www.iacr.com.fr/CanReg5
GNU General Public License v3.0
24 stars 13 forks source link

C1313: secure the RMI communication #103

Closed infotel4iarc closed 2 years ago

infotel4iarc commented 2 years ago

Refer to https://docs.oracle.com/javase/8/docs/technotes/guides/rmi/rmi_security_recommendations.html

fbinfotel commented 2 years ago

The RMI communication between server and client are going to be secured by using the rmi security recommendations guidelines from Oracle.

fbinfotel commented 2 years ago

The branch is https://github.com/infotel4iarc/CanReg5/tree/feature/C1313

Here are the point that were done :

The other points present in the rmi security documents were left because It will be difficult to implement more security without adding complexity to the application installation and configuration.

You can find in copy the recommendations RMI security documented by myself for each guideline present in this document .

Follow Secure Coding Guidelines for Java SE.pdf