Acegi Security 使用很多种过滤器，过滤器的内容将会贯穿本参考文档的剩余部分。你可以选择怎么样在你的web应用程序中使用这些过滤器，你可以使用FilterToBeanProxy或者FilterChainProxy。下面我们就会讨论这两个过滤器。

大多数过滤器都是使用FilterToBeanProxy配置，下面是一个web.xml中配置的例子：

<filter>

<filter-name>Acegi HTTP Request Security Filter</filter-name>

<filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>

<init-param>

<param-name>targetClass</param-name>

<param-value>org.acegisecurity.ClassThatImplementsFilter</param-value>

</init-param>

</filter>

在底层，你需要处理诸如transport security 和系统身份验证(system identification)，这样能够减轻(mitigate)man-in-the-middle attacks(怀疑就是减少应用程序受到攻击).下一步，一般来说你需要一个防火墙，也许是用VPNs或者IP安全措施来保证只有通过授权的系统能够连接。在公司的环境下，你也许需要布置一个DMZ把公共服务期和后台数据库、应用服务器隔离。你的操作体统同样是一个非常重要的部分
addressing issues such as running processes as
non-privileged users and maximising file system security. An operating system will usually also be
configured with its own firewall. Hopefully somewhere along the way you'll be trying to prevent
denial of service and brute force attacks against the system. An intrusion detection system will also be
especially useful for monitoring and responding to attacks, with such systems able to take protective
action such as blocking offending TCP/IP addresses in real-time. Moving to the higher layers, your
Java Virtual Machine will hopefully be configured to minimize the permissions granted to different
Java types, and then your application will add its own problem domain-specific security configuration.
Acegi Security makes this latter area - application security - much easier.
Of course, you will need to properly address all security layers mentioned above, together with
managerial factors that encompass every layer. A non-exhaustive list of such managerial factors
would include security bulletin monitoring, patching, personnel vetting, audits, change control,
engineering management systems, data backup, disaster recovery, performance benchmarking, load
monitoring, centralised logging, incident response procedures etc.
With Acegi Security being focused on helping you with the enterprise application security layer, you
will find that there are as many different requirements as there are business problem domains. A
banking application has different needs from an ecommerce application. An ecommerce application
has different needs from a corporate sales force automation tool. These custom requirements make
application security interesting, challenging and rewarding.

该参考文档已经为Acegi Security1.0.0版本重新设计改写。请阅读第一部分，全面的设计架构，其他部分就是按照传统的参考文档写的，有需要的时候可以参考。
我们希望你能从参考文档中得到帮助，同样我们也欢迎你的建议和意见。
稍后，欢迎来到Acegi Security 社区。