Java Security (2nd Edition)

Rating:
Summary: Good Overview of Java Security
Review: The term "security" means many different things. This book deals with the built-in security features of Java, which most programmers access through the Security Manager and Access Controller. Overall, I liked this book and found it a really good introduction to secutiry. However, for the price of this book, I expected a lot more infomation. For example, I would have liked it if the author explored the cryptographic package in depth and gave more real world examples of using ciphers and encryption. ALthough this is not technically what the book is about, most people think of cryptogrophy in terms of security.

Rating:
Summary: Good Overview of Java Security
Review: The term "security" means many different things. This book deals with the built-in security features of Java, which most programmers access through the Security Manager and Access Controller. Overall, I liked this book and found it a really good introduction to secutiry. However, for the price of this book, I expected a lot more infomation. For example, I would have liked it if the author explored the cryptographic package in depth and gave more real world examples of using ciphers and encryption. ALthough this is not technically what the book is about, most people think of cryptogrophy in terms of security.

Rating:
Summary: Ok - Not enough real How-To
Review: This book covers Java Crypto area (the reason I bought it) in depth BUT spends more time reviewing the classes and options than explaining why you would use them or how you would use them.
Generally disappointed - check out Wrox Professional Java Security...

Rating:
Summary: Great Security book, personal info not needed
Review: This book provides indepth coverage of Java's Security mechanisms. Much better coverage of the API than the AW Security book. However, I really did not want or need to know that: "In his other life, Scott enjoys ...traveling with his husband James." (No, that's not a typo.)

Rating:
Summary: Recommend this book for any serious Java Developer
Review: This book was my first introduction to Java Security. After reading the book, I was able to gain exposure to many complex areas of the Java Security/JCA/JCE APIs to include Class loaders, Byte Code Verifiers, Policy Files, Security Manager, Access Controller, Permissions, Message Digests, Data Encryption, Key Agreements, Digital Signatures, and Digital Certificates. My only negative comment was that the author did not provide any examples using the Secure Sockets Library (SSL). I am currently working on implementing security related issues associated with B2B data exchange and felt that this book was extremely helpful. I would highly recommend this book for any serious Java Developer.

Rating:
Summary: Recommend this book for any serious Java Developer
Review: This book was my first introduction to Java Security. After reading the book, I was able to gain exposure to many complex areas of the Java Security/JCA/JCE APIs to include Class loaders, Byte Code Verifiers, Policy Files, Security Manager, Access Controller, Permissions, Message Digests, Data Encryption, Key Agreements, Digital Signatures, and Digital Certificates. My only negative comment was that the author did not provide any examples using the Secure Sockets Library (SSL). I am currently working on implementing security related issues associated with B2B data exchange and felt that this book was extremely helpful. I would highly recommend this book for any serious Java Developer.

Rating:
Summary: Great Detail
Review: This is a dense and detailed work. I liked the concise examples of how to use JAAS for identification, JSSE for SSL, and JCA for general cryptography, but this book doesn't stop there: if it's related to security, it's in there. I can't imagine many people wanting to change how Java uses policy files or write a keystore or a security provider, but it's in there. And who knew that the class loader was so involved in how security works? All in all, lots of good info.