Enterprise Java Security: Building Secure J2EE Applications

Enterprise authentication and authorization requirements can be fairly complex. To make matters worse, all applications or solutions in a given deployment environment may not originate...

Authentication and authorization are key elements in any secure information-handling system. Initially, much of the Java authentication and authorization focus was on downloadable code running...

is the process by which the identity of a subject is verified. must be performed in a secure fashion; otherwise, a malicious entity may...

The challenge in developing of JAAS was to add principal-based authorization to J2SE in a way that would augment, and not disturb, the existing Java...

As discussed so far in this chapter, JAAS addresses authentication and authorization functions in a Java environment. In previous chapters, we saw how J2EE security...

In addition to JAAS, the Generic Security Services API[6] and Simple Authentication and Security Layer (SASL) define frameworks that provide additional support for pluggable authentication....