Resumen
The article discusses different approaches to Webware security. Many systems, including Java, ActiveX, JavaScript and Web plug-ins, allow Web authors to attach an executable program to a Web page, so that anyone visiting the page automatically downloads and runs the program. These systems (collectively known as Webware) offer unique security challenges. There are two approaches to Webware security. The all-or-nothing model is typified by the Microsoft's ActiveX and by Netscape plug-ins. These systems rely on the user to make an all-or-nothing decision about whether to run each downloaded program. The containment model is typified by Java from Sun Microsystems. Java allows any program to be downloaded but tries to run that program within a contained environment in which it cannot do any damage. Both approaches have problems. The problem with the all-or-nothing model is subtle but is impossible to fix; it puts too much burden on the user. The main problem with the containment model is its complexity. Webware security is difficult because of human nature.