Enterprise Java Security: Building Secure J2EE Applications

An enterprise solution has come to be considered incomplete if the applications it enables cannot be accessed over the Web. Along with the advantages of...

In the Web-based world, many of the servers run an HTTP Web server. The traditional way to add customized functions to a Web server has...

Java servlet technology offers many advantages. A servlet can interact with other resources—file systems, databases, applets, applications written in the Java language or in other languages—to...

Servlets use packages found in the Java Servlet API. When you write code for a Java servlet, you must use at least one of the...

A Web application is a collection of servlets, JSP applications, and static content, such as HTML pages, that can be accessed over the Internet. A...

is the process to prove the identity of an entity or principal. In a J2EE environment, a principal may be An end user—for example, Bob—invoking a...

Once a client is authenticated, a J2EE container needs to perform authorization checks. policies configured in an enterprise describe which users or groups are...

Frequently, multiple software components are aggregated to create a Web application. Often, these components call other components to perform specific tasks of the application. For...

Declarative security facilities in the Java Servlet specification define the primary mechanisms by which the Web container manages and enforces security. However, in some scenarios,...

A number of programming restrictions must be followed in order to maintain portability of Web components—servlets and JSP applications—between containers, as well as to preserve...

The declarative and programmatic security features supported by the Java Servlet specification are used in various ways within enterprise environments. Based on the need, common...

Web applications are logical groups of Web resources. Therefore, certain security constraints, such as login configuration and data constraints, are scoped to a specific Web...