Direct from the expert architects at Sun, an in-depth treatment of J2EE security architectural patterns and practices
° Practical! Proven patterns as well as a complete case study will help the reader learn AND deploy the latest techniques
° Thorough coverage of J2EE interoperability with Microsoft .NET
° Companion title to best selling Core J2EE Patterns by Deepak Alur, John Crupi and Dan Malks
Praise for Core Security Patterns
Java provides the application developer with essential security mechanisms and support in avoiding critical security bugs common in other languages. A language, however, can only go so far. The developer must understand the security requirements of the application and how to use the features Java provides in order to meet those requirements. Core Security Patterns addresses both aspects of security and will be a guide to developers everywhere in creating more secure applications.
--Whitfield Diffie, inventor of Public-Key Cryptography
A comprehensive book on Security Patterns, which are critical for secure programming.
--Li Gong, former Chief Java Security Architect, Sun Microsystems, and coauthor of Inside Java 2 Platform Security
As developers of existing applications, or future innovators that will drive the next generation of highly distributed applications, the patterns and best practices outlined in this book will be an important asset to your development efforts.
--Joe Uniejewski, Chief Technology Officer and Senior Vice President, RSA Security, Inc.
This book makes an important case for taking a proactive approach to security rather than relying on the reactive security approach common in the software industry.
--Judy Lin, Executive Vice President, VeriSign, Inc.
Core Security Patterns provides a comprehensive patterns-driven approach and methodology for effectively incorporating security into your applications. I recommend that every application developer keep a copy of this indispensable security reference by their side.
--Bill Hamilton, author of ADO.NET Cookbook, ADO.NET in a Nutshell, and NUnit Pocket Reference
As a trusted advisor, this book will serve as a Java developers security handbook, providing applied patterns and design strategies for securing Java applications.
--Shaheen Nasirudheen, CISSP,Senior Technology Officer, JPMorgan Chase
Like Core J2EE Patterns, this book delivers a proactive and patterns-driven approach for designing end-to-end security in your applications. Leveraging the authors strong security experience, they created a must-have book for any designer/developer looking to create secure applications.
--John Crupi, Distinguished Engineer, Sun Microsystems, coauthor of Core J2EE Patterns
Core Security Patterns is the hands-on practitioners guide to building robust end-to-end security into J2EE™ enterprise applications, Web services, identity management, service provisioning, and personal identification solutions. Written by three leading Java security architects, the patterns-driven approach fully reflects todays best practices for security in large-scale, industrial-strength applications.
The authors explain the fundamentals of Java application security from the ground up, then introduce a powerful, structured security methodology; a vendor-independent security framework; a detailed assessment checklist; and twenty-three proven security architectural patterns. They walk through several realistic scenarios, covering architecture and implementation and presenting detailed sample code. They demonstrate how to apply cryptographic techniques; obfuscate code; establish secure communication; secure J2ME™ applications; authenticate and authorize users; and fortify Web services, enabling single sign-on, effective identity management, and personal identification using Smart Cards and Biometrics.
Core Security Patterns covers all of the following, and more:
Download the Sample
Chapter related to this title.
Foreword by Judy Lin.
Foreword by Joe Uniejewski.
About the Authors.
1. Security by Default.
Business Challenges Around Security
What Are the Weakest Links?
The Impact of Application Security
The Four W's
Strategies for Building Robust Security
Proactive and Reactive Security
The Importance of Security Compliance
The Importance of Identity Management
The Importance of Java Technology
Making Security a "Business Enabler"
2. Basics of Security.
Security Requirements and Goals
The Role of Cryptography in Security
The Role of Secure Sockets Layer (SSL)
The Importance and Role of LDAP in Security
Common Challenges in Cryptography
II. JAVA SECURITY ARCHITECTURE AND TECHNOLOGIES.
3. The Java 2 Platform Security.
Java Security Architecture
Java Applet Security
Java Web Start Security
Java Security Management Tools
J2ME Security Architecture
Download the Forewords file related to this title:
Download the Index
file related to this title.