Enterprise Java Security: Building Secure J2EE Applications

Any sound specification should be backed by a solid implementation that adheres to the specification; is secure, reliable, and administrable; and performs well. A J2EE...

In order to architect a J2EE-compliant hosting environment—in other words, a Web application server—it is important to understand the environment in which it will be...

The purpose of authentication is to verify the identity of a requesting entity. Typically, this entity is an end user requesting access to a resource,...

in a J2EE environment is based on the concept of roles. A user who has been granted at least one of the required roles is...

Secure communication channels are an important part of a secure environment. As SSL is a widely accepted secure transport protocol, communication between containers can be...

Securing the communication between containers is one part of a secure exchange of information. In addition to establishing an SSL session, it is important for...

Depending on the trust level on the deployed applications, one would have to protect malicious applications from accessing system resources, such as files and sockets,...

The Java Connector Architecture allows for applications to access resources—typically, non-J2EE applications—in an architected fashion. For every resource that is accessed, a resource adapter is...