Chapter 3. Enterprise Java Security Fundamentals
Chapter 4. Servlet and JSP Security
Chapter 5. EJB Security
Chapter 6. Enterprise Java Security Deployment Scenarios