Inside the Java 2 Platform Security is the definitive and comprehensive guide to the Java security platform. Written by the Chief Java Security Architect at Sun, it provides a detailed look into the central workings of the Java security architecture and describes security tools and techniques for successful implementation.
This book features detailed descriptions of the many enhancements incorporated within the security architecture that underlies the Java 2 platform. It also provides a practical guide to the deployment of Java security, and shows how to customize, extend, and refine the core security architecture. For those new to the topic, the book includes an overview of computer and network security concepts and an explanation of the basic Java security model.
You will find detailed discussions on such specific topics as:
* The original Java sandbox security model
* The new Java 2 Platform permission hierarchy
* How Java security supports the secure loading of classes
* Java 2 access control mechanisms
* Policy configuration
* Digital certificates
* Security tools, including Key Store and Jar Signer
* Secure Java programming techniques
* Ways to customize the Java security architecture with new permission types
* How to move legacy security code onto the Java 2 Platform
In addition, the book discusses techniques for preserving object security--such as signing, sealing, and guarding objects--and outlines the Java cryptography architecture. Throughout, the book points out common mistakes and contains numerous code examples demonstrating the usage of classes and methods.
With this complete and authoritative guide, you will gain a deeper understanding into how and why the Java security technology functions as it does, and will be better able to utilize its sophisticated security capabilities in the development of your applications.
ABOUT THE AUTHOR
|
| Li Gong | Li Gong is a Distinguished Engineer and Director of Engineering, Peer-to-Peer Networking, at Sun Microsystems. He was Director, Server Products, at the Consumer and Embedded Division, and was the founding chair of OSGi's Java Expert Group, where he led the completion of OSGi's Service Gateway Specification 1.0. He received B.S. and M.S. degrees from Tsinghua University, Beijing, China, and a Ph.D. from the University of Cambridge, England. He is the author of Inside Java® 2 Platform Security (Addison-Wesley, 1999). |