performance

Hi, I would like to know something about performance.
Isn't it true that performance degrades when you use all possible security features available. I have worked for several banks and always found that when using things like SSL, JAAS, ACL, digital siguature, etc, you will see a perfomance issue.
Is there a good practice described in the book as well for these issues ?
baz

Performance is definitely a problem when you need to provide highly secure measurements. For example, encryption is a high cost operation, because it needs lots of CPU resource to compute the ciphers. But this can be reduced a bit if you choose different algorithms (RSA vs ECC).
For bank, of course, the highest priority MUST be the security. No matter how fast you can handle the transactions, it is meaningless if the system is NOT secure.
Performance and security measurements are always the trade off. You need to find out the focus of the system, and then make a judement on the balance.

Nick

thanks for not answering the question whether it is in the book or not. Obviously i am aware that banks do need the highest security and that it is business critical etc.
There is always a trade off and i just wanted to know if that was described in the book

I can only answer you this question:

Isn't it true that performance degrades when you use all possible security features available

as I am not the writer of the book, and I have not read the book in details.
Whether the book discuss this issues, I think we need to wait the answer from the author.

Nick