Enterprise Java Security: Building Secure J2EE Applications

No enterprise solution is complete without the ability to model business processes and perform transactions. These transactions may use existing, or legacy, systems or newly...

EJB technology is a server-side component model for the development and deployment of secure distributed-transaction business programs. The model enables Enterprise Bean Providers to write...

EJB technology defines a set of processes, starting from the application development and following through the administration of the deployed code. The EJB specification describes...

The EJB specification does not directly address the issue of authentication and the authentication process. Most of the specification deals with authenticated principals and the...

Much of EJB security is concerned with authorization. In general, access to a deployed enterprise bean is via an ORB, such as RMI-IIOP. EJB authorization...

is the process of forwarding a principal's credentials along with associated tasks that the principal originated or is having performed on its behalf. The EJB...

Although not specifically a security consideration, the EJB programming model constrains an enterprise bean to a limited set of resources. Specifically, in a J2SE environment,...