Enterprise Java 2 Security: Building Secure and Robust J2EE Applications

Rating:
Summary: Misleading title - Absolute mess
Review: This book is titled wrong and absolute mess. This books claims coverage on building robust J2EE security - But unfortunately it lacks and missing a lot of J2EE security features. Particularly There is no discussion on how to adopt role based security, propogating security at all tiers, JAX-RPC and EJB Endpoint security and so on. This book only offers a very basic level of securing a J2EE application beyond that YOU WILL BE BORED TO TEARS.

Rating:
Summary: A good book on Java security
Review: This book makes me nostalgic for the early SAMS Publishing Unleashed series of books on Java. Remember when you first learned what a servlet was? That's the feeling I get when reading Enterprise Java Security. The book does a good job explaining how Secure Sockets Layer (SSL,) object-level security, Kerberos, and legacy security came about. It then shows detailed examples with sample code how to implement each of the security techniques. The text is surprisingly complete, including coverage of Web Service Security protocols and techniques.