Deep Dive into Java 2 Platform Security - Architecture, API Design, and Implementation (Second Edition)

Author: Gong Li et al. (USA), Translated by Zhu Dai
Publisher:
Publish Date: 2004-09-01
Features: "Deep Dive into Java#8482;2 Platform Security" is an authoritative and comprehensive guide on the Java security platform. This book has been updated to cover the Java security technologies adopted by many leading tech companies, reflecting key content additions and version revisions. It is the second edition, written by Java security experts from Sun Microsystems, providing an in-depth analysis of the core mechanisms of the Java security system and describing tools and techniques that can be successfully implemented even in harsh computing environments. Java always offers a stronger security model than other platforms, and this book revisits methods and practices used to enhance security without sacrificing functionality. By adopting techniques for customizing, extending, and optimizing the Java security architecture, users will be able to use all necessary methods to protect their information assets from internal and external attacks. The book delves into various aspects of the security architecture, deployment, customization, and new developments, including:
· Security fundamentals;
· Secure class loading;
· Developing fine-grained security policies;
· Using AccessController, SecurityManager, etc., to enforce security policies;
· Digital certificates, certificate paths, code signing, JAAS, and other authentication methods;
· Java-based cryptographic mechanisms, with code examples provided;
· Network security technologies such as JSSE, JavaGSS-API, and RMI;
· A preview of security topics on other platforms, including JavaCard, J2ME, and Jini.
"Deep Dive into Java#8482;2 Platform Security" is written for system administrators and software professionals, offering key knowledge for building and maintaining secure systems on the Java#8482;2 platform. The book also provides detailed code and usage examples, offering an indispensable resource for all aspects of platform security.