[Book Cover]

JAVA 2 Network Security, 2/e

Marco Pistoia

Published August, 1999 by Prentice Hall PTR (ECS Professional)

Copyright 2000, 250 pp.
Paper
ISBN 0-13-015592-6
$49.99


Sign up for future
mailings on this subject.

See other books about:
    JAVA

 [Sample Chapter]
[Preface]





The complete insider's guide to securing Java 2 enterprise applications!

  • Building secure enterprise applications with Java 2!
  • Integrating Java 2 into your overall security strategy
  • Detailed coverage for managers, developers, netadmins, and security specialists
  • Comprehensive coverage of the new Java 2 security model
  • Integrate Java 2 into your enterprise security strategies
  • Master Java's powerful Cryptography APIs
Now that Java is "leaving the sandbox," you need stronger security than ever, and Java 2 Network Security, Second Edition shows you how to get it. Unlike other books, which focus on how Java can be broken, this one delivers practical help with Java 2 security to everyone involved in building and deploying industrial-strength Java-based applications.

Written in cooperation with Sun's own developers, Java 2 Network Security, Second Edition presents systematic coverage of the new Java 2 network security model for managers, network administrators, developers, and security professionals alike. You'll learn the real-world pros and cons of each leading Java security alternative; architectural techniques for maximizing security; and how to integrate Java security into your enterprise-wide security strategies. You'll discover practical techniques for securing Web and intranet applications, deploying or limiting Java across corporate firewalls; integrating Java and SSL, leveraging Java's powerful Cryptography APIs, and much more. Java 2 Network Security, Second Edition is up-to-date, authoritative, and thorough-and if you're using Java in enterprise development, it's utterly essential. Sharing Technical Expertise from Around the World This book and other IBM Redbooks are products of IBM's International Technical Support Organization, where worldwide specialists work alongside you to harness IBM technologies. IBM Redbooks make the answers to your most pressing technical questions easily and immediately accessible. For more information: http://www.redbooks.ibm.com/redbooks
  • Securing mission-critical Java applications: real-world techniques that work
  • Detailed coverage of the new Java 2 security model


    • Author Bio

    MARCO PISTOIA is an Advisory Network Security Specialist working as a Project Leader in IBM's International Technical Support Organization, Raleigh Center, Raleigh, NC. He writes extensively and teaches IBM classes worldwide on all areas of the e-Business Application Framework, Java, and Internet Security.




I. INTRODUCTION TO JAVA AND SECURITY.
    1. An Overview of Java and Security.

      Java Is Not Just a Language. What Java Does. Java Is Not an Island: Java as a Part of Security. Understanding Java 2 Security. Summary.

    2. Attack and Defense.

      Components of Java. Java 2 and Cryptography. Attacking the World of Java. Summary.

    3. The New Java Security Model.

      The Need for Java Security. Evolution of the Java Security Model. Java 2 Protection Domain and Permissions Model. New Class Search Path. Java 2 Class Loading Mechanism. The Policy File. Security Manager vs Access Controller. Security Management with Java. Summary.

II. UNDER THE HOOD.
    4. The Java Virtual Machine.

      The Java Virtual Machine, Close Up. Summary.

    5. Class Files in Java.

      The Traditional Development Life Cycle. The Java Development Life Cycle. The Java 2 Class File Format. The Constant Pool. Java Bytecode.

    6. The Class Loader and Class File Verifier.

      Class Loaders. The Class File Verifier. The Bytecode Verifier in Detail. An Incompleteness Theorem for Bytecode Verifiers. Summary.

    7. The Java 2 Security Manager.

      What Security Manager Does. Operation of the Security Manager. Attacking the Defenses of Java. Avoiding Security Hazards. Examples of Security Manager Extensions. Summary.

    8. Security Configuration Files in the Java 2 SDK.

      A Note on java.home and the JRE Installation Directory. Keystores. The Security Properties File, java.security. Security Policy Files. An Example of Security Settings in the Java 2 Platform. File Read Access to Files in the Code Base URL Directory. Security Properties and Policy File Protection. How to Implement a Policy Server.

    9. Java 2 SDK Security Tools.

      Key and Certificate Management Tool. Java Archive Tool. JAR Signing and Verification Tool. Policy File Creation and Management Tool.

    10. Security APIs in Java.

      The Package java.security. The Package java.security.spec. The Package java.security.cert. Package java.security.interfaces. The Package java.security.acl. Examples Using the Java 2 Security APIs. The Permission Classes. How to Write Privileged Code.

    11. The Java Plug-In.

      Main Features of Java Plug-In. What Does the Java Plug-In Do? Java Plug-In HTML Changes. Java Plug-In Control Panel. Java Plug-In Security Scenario.

    12. Java Gets Out of Its Box.

      JAR Files and Applet Signing. Signed Code Scenario in JDK 1.1 and Sun HotJava. Signed Code Scenario in Java 2 SDK, Standard Edition, V. Signed Code Scenario in Netscape Communicator. Signed Code Scenario in Microsoft Internet Explorer. The JAR Bug Fixed In Java 2 SDK, Standard Edition, V. Future Developments.
III. BEYOND THE ISLAND OF JAVA SURFING INTO THE UNKNOWN.
    13. Cryptography in Java.

      Security Questions, Cryptographic Answers. The Java Cryptography Architecture Framework. JCA Terms and Definitions. Java Cryptography Extension. Java Cryptography in Practice. Asymmetric Encryption with the Java 2 SDK and JCE. How to Implement Your Own Provider.

    14. Enterprise Java.

      Browser Add-On Applets. Networked Architectures. Secure Clients and Network Computers. Server-Side Java. Servlets. Distributed Object Architectures RMI. Enterprise JavaBeans.

    15. Java and Firewalls In and Out of the Net.

      What Is a Firewall? What Does a Firewall Do? Detailed Example of TCP/IP Protocol. Proxy Servers and SOCKS Gateways. The Effect of Firewalls on Java. Java and Firewall Scenarios. Remote Method Invocation. Summary.

    16. Java and SSL.

      What Is SSL? Using SSL from an Applet. Java and SSL with Sun Microsystems. How to Use Java and SSL. Java and SSL with IBM SSLite. Conclusions. Summary.

    17. Epilogue.

      Future Directions of Java. Conclusion.

    Appendix A: Getting Internal System Properties.

      Program GetAllProperties. Program GetProperty.

    Appendix B: Signature Formats.
    Appendix C: X.509 Certificates.

      X.509 Certificate Versions.

    Appendix D: Sources of Information about Java Security.

      Companies. Universities.

    Appendix E: What's on the Diskette?

      How to Access the Diskette. How to Get the Same Software Material from the Web.

    Appendix F: Special Notices.
    Appendix G: Related Publications.

      International Technical Support Organization Publications. Redbooks on CD-ROMs. Other Publications. How to Get ITSO Redbooks. IBM Redbook Fax Order Form. Glossary.

    Index.
    ITSO Redbook Evaluation.

[Help] [Home]

© Prentice-Hall, Inc. A Pearson Education Company
Comments To webmaster@prenhall.com