(KH)J2EE & Java Hacker's Disclosure -- Developing Java Applications for Development Cases

Author: [USA] Art Taylor, Randy Layman, Brian Buege; Translated by Zhang Wei, Zhang Hua et al.
Publisher:
Publish Date: 2003-12-01
Features: With the widespread use of Java applications, Java security issues have become increasingly complex. The authors of this book expose the methods and techniques used by hackers to attack Java applications through real-world attack cases, proposing defensive measures and solutions to help you prepare for the worst and stay one step ahead. The book begins by introducing the architecture of Java and J2EE systems and basic security mechanisms, explaining Java authentication and authorization services, Java Cryptography Extension (JCE), and Java Secure Socket Extension (JSSE) security packages. It includes a complete and clear example project, studying its different versions, including standalone application, tiered application, web-based, and EJB-based versions, to demonstrate the various security issues Java and J2EE applications may encounter in different environments and promptly propose countermeasures. This book is a treasure trove for developing Java security applications, focusing on issues closely related to application developers. It is aimed at application developers familiar with the Java language, and it is also an invaluable reference for network administrators and professionals who want to learn how to maintain the security of J2EE and Java Web applications.