Enterprise Java Security: Building Secure J2EE Applications

Java technology is not just for applets any more. Developers now use Java technology to build stand-alone, enterprise-class applications to enable disparate clients, such as...

The object-oriented Java language provides mechanisms for limiting access to classes, interfaces, fields, and methods. A class or an interface is said to be public...

A class loader is responsible for loading classes from a specific location. At runtime, multiple class loaders may be in effect at any given time....

Once it has been located and loaded by a ClassLoader other than the primordial class loader, a class still has another hurdle to cross before...

A Java environment can be subjected to four levels of attack: System modification, in which a program gets read/write access and makes some changes to the...

Although the three legs of Java security—class-loading system, class file verifier, and security manager—each have unique functions, they are interdependent. The class-loading system relies on the...

In this chapter, we took a deep look at the foundations of Java 2 security. First, we examined how it is possible to restrict access...