Introduction

• Developers are not responsible to take care of the Network Security.
• They are just responsible for the Application level Security.
• Application level security is all about authentication and authorization like checking the identity of user by using User Name and Password is called Authentication.
• Just like checking the Access permission of user on a particular resources of Application.
• For a network security spring initially has given spring Acegi security style framework to secure spring based Application.
• Acegi is now known as Spring Security Framework.


For a spring security, we have predefined things like:
• org.sf.web.Context.ContextLoaderListener is a Servlet Context Listener which activates spring web-app context container either during server startup and deployment of web-app when servlet context is created.
• org.sf.web.Filter.DelegatingFilterProxy is the predefined Servlet Filter that takes all the requests coming to the web-app and passes to the Spring Bean that are configured in spring config file.
• In the spring config file we specify entries related to authentication and authorization by defining user and their roles.

For Example For creating spring Application including Spring Security:
1) Make ready 2.5 or 3 software.
2) Make ready Spring Security zip file.
3) Create spring based web-app.