Safe Mode: Best Practices and Strategies for J2EE, Web Services, and Identity Management

Author: (American) Steel et al., translated by Chen Qiuping et al.
Publisher:
Publishing Date: 2006-09-01
Features: This book compiles the rich experience of the authors in the field of security, comprehensively elaborating on the basic knowledge and structured security design methods of Java application security. It introduces how to build reliable applications and services using pattern-driven and best practices. The book is divided into two parts. The first part introduces security architecture, mechanisms, standards, technologies, and implementation principles for J2EE applications, web services, identity management, service provisioning, and identity recognition. The second part presents 23 brand-new security patterns and 101 best practices, helping developers build end-to-end secure J2EE applications. This book is a reference for developers, designers, and managers engaged in computer security technology. It is a practical guide for security professionals, introducing how to establish robust end-to-end security in J2EE enterprise applications, web services, identity management, service provisioning, and identity recognition solutions. Written by three outstanding Java security architects, the book's pattern-driven approach comprehensively reflects the best practices for ensuring the security of large-scale applications.
This book comprehensively elaborates on the basic knowledge of Java application security and introduces a powerful structured security design method. It presents vendor-independent security architecture, lists detailed evaluation checklists, and 23 proven security architecture patterns. The book covers various practical scenarios, explains architecture and implementation, and provides detailed example code. It also discusses how to use encryption technology, obfuscate code, establish secure communication, ensure the security of J2ME applications, authenticate and authorize users, and protect web services—implementing single sign-on, effective identity management, and using smart cards and biometrics for identity recognition.
This book compiles the rich experience of the authors in the field of security, comprehensively elaborating on the basic knowledge and structured security design methods of Java application security. It introduces how to build reliable applications and services using pattern-driven and best practices. The book is divided into two parts. The first part introduces security architecture, mechanisms, standards, technologies, and implementation principles for J2EE applications, web services, identity management, service provisioning, and identity recognition. The second part presents 23 brand-new security patterns and 101 best practices, helping developers build end-to-end secure J2EE applications. This book is a reference for developers, designers, and managers engaged in computer security technology.