Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management - page 1
- Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management
- Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management
- Table of Contents
- Copyright
- Praise for Core Security Patterns
- Prentice Hall Core Series
- Foreword
- Foreword
- Preface
- What This Book Is About
- What This Book Is Not
- Who Should Read This Book?
- How This Book Is Organized
- Companion Web Site
- Feedback
- Acknowledgments
- Chris Steel
- Ramesh Nagappan
- Ray Lai
- About the Authors
- Part I: Introduction
- Chapter 1. Security by Default
- Business Challenges Around Security
- What Are the Weakest Links?
- The Impact of Application Security
- The Four W s
- Strategies for Building Robust Security
- Proactive and Reactive Security
- The Importance of Security Compliance
- The Importance of Identity Management
- Secure Personal Identification
- The Importance of Java Technology
- Making Security a Business Enabler
- Summary
- References
- Chapter 2. Basics of Security
- Security Requirements and Goals
- The Role of Cryptography in Security
- The Role of Secure Sockets Layer (SSL)
- The Importance and Role of LDAP in Security
- Common Challenges in Cryptography
- Threat Modeling
- Identity Management
- Summary
- References
- Part II: Java Security Architecture and Technologies
- Chapter 3. The Java 2 Platform Security
- Java Security Architecture
- Java Applet Security
- Java Web Start Security
- Java Security Management Tools
- J2ME Security Architecture
- Java Card Security Architecture
- Securing the Java Code
- Summary
- References
- Chapter 4. Java Extensible Security Architecture and APIs
- Java Extensible Security Architecture
- Java Cryptography Architecture (JCA)
- Java Cryptographic Extensions (JCE)
- Java Certification Path API (CertPath)
- Java Secure Socket Extension (JSSE)
- Java Authentication and Authorization Service (JAAS)
- Java Generic Secure Services API (JGSS)
- Simple Authentication and Security Layer (SASL)
- Summary
- References
- Chapter 5. J2EE Security Architecture
- J2EE Architecture and Its Logical Tiers
- J2EE Security Definitions
- J2EE Security Infrastructure
- J2EE Container-Based Security
- J2EE ComponentTier-Level Security
- J2EE Client Security
- EJB Tier or Business Component Security
- EIS Integration TierOverview
- J2EE ArchitectureNetwork Topology
- J2EE Web Services SecurityOverview
- Summary
- References
