This is a practical guide to building a secure enterprise infrastructure with J2SE and J2EE technologies. This text explains how J2SE and J2EE security architectures relate to each other, and also covers the security aspects of servlets, JSP and EJB.

Enterprise Java experts John Hunt and Chris Loftus take the reader through the core technologies that make up the Enterprise Edition of the Java 2 platform (J2EE). They cover all the aspects of J2EE that both the professional and student needs to know to build multi-tier enterprise applications in Java. This includes the various technologies, design methodology, and design patterns. The text contains fully worked examples, built up throughout the book, which enables the reader to quickly develop multi-tier applications. An invaluable text for those who want to build enterprise wide applications in Java.

One of Java's most striking claims is that it provides a secure programming environment. Yet despite endless discussion, few people understand precisely what Java's claims mean and how it backs up those claims. If you're a developer, network administrator or anyone else who must understand or work with Java's security mechanisms, Java Security is the in-depth exploration you need.Java Security, 2nd Edition, focuses on the basic platform features of Java that provide security--the class loader, the bytecode verifier, and the security manager--and recent additions to Java that enhance this security model: digital signatures, security providers, and the access controller. The book covers the security model of Java 2, Version 1.3, which is significantly different from that of Java 1.1. It has extensive coverage of the two new important security APIs: JAAS (Java Authentication and Authorization Service) and JSSE (Java Secure Sockets Extension). Java Security, 2nd Edition, will give you a clear understanding of the architecture of Java's security model and how to use that model in both programming and administration.The book is intended primarily for programmers who want to write secure Java applications. However, it is also an excellent resource for system and network administrators who are interested in Java security, particularly those who are interested in assessing the risk of using Java and need to understand how the security model works in order to assess whether or not Java meets their security needs.

Most security books on Java focus on cryptography and access control, but exclude key aspects such as coding practices, logging, and web application risk assessment. Encapsulating security requirements for web development with the Java programming platform, Secure Java: For Web Application Development covers secure programming, risk assessment, and

This IBM Redbooks publication reviews the overall Tivoli Enterprise Security Architecture. It focuses on the integration of audit and compliance, access control, identity management, and federation throughout extensive e-business enterprise implementations. The available security product diversity in the marketplace challenges everyone in charge of designing single secure solutions or an overall enterprise security architecture. With Access Manager, Identity Manager, Federated Identity Manager, Security Compliance Manager, Security Operations Manager, Directory Server, and Directory Integrator, Tivoli offers a complete set of products designed to address these challenges. This book describes the major logical and physical components of each of the Tivoli products. It also depicts several e-business scenarios with different security challenges and requirements. By matching the desired Tivoli security product criteria, this publication describes the appropriate security implementations that meet the targeted requirements. This book is a valuable resource for security officers, administrators, and architects who want to understand and implement enterprise security following architectural guidelines.

The key to mastering cutting-edge Java technologies, and practical design and deployment issues in the business environment.

& • Everything Java developers need to start building J2EE applications using WebSphere Tools for the WebSphere Application Server & & • Hands-on techniques and case studies: servlets, JSP, EJB, IBM VisualAge for Java, and more & & • Written by IBM insiders for IBM Press

Java 2 Enterprise Edition (J2EE) is the specification that all enterprise Java developers need to build multi-tier applications, and also the basis for BEA's WebLogic Application Server and IBM's WebSphere Revised to be current with the significant J2EE 1.4 update that will drive substantial developer interest Written by a top-selling team of eleven experts who provide unique and substantial business examples in a vendor-neutral format, making the information applicable to various application servers Covers patterns, J2EE application servers, frameworks, Ant, and continuous availability Includes extensive intermediate and advanced coverage of J2EE APIs Companion Web site provides additional examples and information

With the recent release of Java 2 Enterprise Edition 1.4, developers are being called on to add even greater, more complex levels of interconnectivity to their applications. To do this, Java developers need a clear understanding of how to apply the new APIs, and the capabilities and pitfalls in the program--which they can discover in this edition.

Jaworski, a professional Java developer, gives readers a practical, hands-on book that contains concise descriptions of security theory, complete secure applications, and thousands of lines of proven, real-world, commercial-quality code. Web site features security documentation and sample security policies, as well as code from the book.