Java EE 5 Specification:
http://jcp.org/en/jsr/detail?id=244
The Developer's Guide for the Application Server PE includes security information for application developers:
http://docs.sun.com/doc/819-3659
The Administration Guide for the Application Server PE includes information on setting security settings for the Application Server:
http://docs.sun.com/doc/819-3658
The Application Deployment Guide for the Application Server PE:
http://docs.sun.com/doc/819-3660
EJB 3.0 Specification (JSR-220):
http://jcp.org/en/jsr/detail?id=220
Web Services for Java EE (JSR-109):
http://jcp.org/en/jsr/detail?id=109
Java 2 Standard Edition, v.1.5.0 security information:
http://java.sun.com/j2se/1.5.0/docs/guide/security/index.html
Java Servlet specification:
http://jcp.org/en/jsr/detail?id=154
JSR 175: A Metadata Facility for the Java Programming Language:
http://jcp.org/en/jsr/detail?id=175
JSR 181: Web Services Metadata for the Java Platform:
http://jcp.org/en/jsr/detail?id=181
JSR 250: Common Annotations for the Java Platform:
http://jcp.org/en/jsr/detail?id=250
The Java SE discussion of annotations:
http://java.sun.com/j2se/1.5.0/docs/guide/language/annotations.html
The API specification for Java Authorization Contract for Containers:
http://jcp.org/en/jsr/detail?id=115
Information on SSL specifications:
http://wp.netscape.com/eng/security