Enterprise Java Security: Building Secure J2EE Applications

This book is a nice, general, "white paper" type overview of security inJava. The authors demonstrate a good, solid understanding of J2EEsecurity. However, they don't provide enough in the way of actualimplementation examples. I feel this is a major shortcoming of thebook.
The book starts with a general overview of security and thenmoves on to using applets with RMI through a firewall. The next sectiondeals with Servlets, JSP, and EJB security and shows us some deploymentdescriptors and a few code samples but not enough to get a firm grasp onhow to implement security. Part 3 discusses the basics of Java security.Part 4 discusses cryptography. The final part discusses advanced topicsincluding a way too brief chapter on web services.
In general the book spends too much space discussing security topics andnot nearly enough space demonstrating how to use the information provided.The book tends to be too technical in ways that are generally notinteresting to Java developers. For example, does a developer really needthis: "One straightforward application of the one-way function to DH is tohave two entities to publicly agree on a point P on an elliptic curve Eover a finite field, where p is a very large prime number."
I think this book may be very useful in combination with another book thatis much more example driven, "J2EE Security for Servlets, EJBs, and WebServices" by Pankaj Kumar.

Books -> Subjects -> Computing & Internet -> Digital Lifestyle -> Online Shopping -> Amazon
Books -> Subjects -> Computing & Internet -> Digital Lifestyle -> Online Shopping -> General AAS
Books -> Subjects -> Computing & Internet -> General
Books -> Subjects -> Computing & Internet -> Networking & Security -> Security -> Cryptography & Encryption
Books -> Subjects -> Computing & Internet -> Networking & Security -> Security -> Programming -> Java
Books -> Subjects -> Computing & Internet -> Networking & Security -> Security -> Programming -> General AAS
Books -> Subjects -> Computing & Internet -> Networking & Security -> Security -> General AAS
Books -> Subjects -> Computing & Internet -> Programming -> Languages -> Java -> J2EE
Books -> Subjects -> Computing & Internet -> Programming -> Languages -> Java -> General AAS
Books -> Subjects -> Computing & Internet -> Programming -> Languages & Tools -> General AAS
Books -> Subjects -> Computing & Internet -> Programming -> General AAS
Books -> Subjects -> Computing & Internet -> General AAS
Books -> Refinements -> Language (feature_browse-bin) -> English
Books -> Refinements -> Format (binding_browse-bin) -> Paperback
Books -> Refinements -> Font Size (format_browse-bin) -> Regular Size

Marco Pistoia, Nataraj Nagaratnam, Larry Koved, Anthony Nadalin

Reader Reviews:

Needs more code samples (1/1 people found this helpful)

Categories