Inside Java 2 Platform Security: Architecture, API Design, and Implementation

Amazon.com
An expert tour of security on the new Java 2 platform, Inside Java 2 Security will find an enthusiastic audience among advanced Java developers and system administrators. As the author notes during the general discussion on network security, safeguarding your system goes far beyond mere cryptography.

This book reviews multiple security threats and the strategies used to combat them, such as denial of service attacks, Trojan horses, and covert channels. In addition, it touches on the evolution of Java security from the restrictive days of the JDK 1.0 sandbox to the sophisticated security features available in Java 2, including a section that presents a list of 11 security bugs found in early versions of Java.

Because Java 2 security is now policy-based, it must be managed by system administrators as part of enterprise security. A chapter on Java 2 security presents the "big picture" as well as the classes used to implement policy-based security where developers can control access to an entire system like files, network resources, or runtime permissions on code. The book also discusses the rather primitive tools used for Java 2 security management such as the policytool utility. For advanced developers, further sections demonstrate how to create new permission classes and how to make JDK 1.1 security code migrate to Java 2.

FROM THE PUBLISHER

Inside Java 2 Platform Security is the definitive and comprehensive guide to the Java security platform. Written by the Chief Java Security Architect at Sun, it provides a detailed look into the central workings of the Java security architecture and describes security tools and techniques for successful implementation.

SYNOPSIS

Gong, managing director of Sun Microsystems' Engineering and Research Institute in Beijing, provides a detailed look into the central workings of the Java security architecture and describes tools and techniques for successful implementation. Written for both system administrators and software practitioners, the book covers security architecture, deployment, customization, and new developments. Annotation ©2003 Book News, Inc., Portland, OR

FROM THE CRITICS

Booknews

The Chief Java Security Architect at Sun Microsystems, where Java comes from, provides a detailed look at the central workings of Jana security architecture and describes security tools and techniques for successful implementation. He also discusses techniques for preserving object security, among them signing, sealing, and guarding objects. Annotation c. Book News, Inc., Portland, OR (booknews.com)

AUTHOR DESCRIPTION

Li Gong, internationally renowned computer security expert and Chair of the Java Security Advisory Council, is Chief Java Security Architect and a Distinguished Engineer at Sun Microsystems, Inc. He is an Associate Editor of ACM Transactions on Information and System Security and The Journal of Computer Security, and served as Program Chair of the IEEE Symposium on Security and Privacy and the ACM Conference on Computer and Communications Security.

ACCREDITATION