Inside Java 2 Platform Security: Architecture, API Design, and Implementation (2nd Edition)

Amazon.com

An expert tour of security on the new Java 2 platform, Inside Java 2 Security will find an enthusiastic audience among advanced Java developers and system administrators. As the author notes during the general discussion on network security, safeguarding your system goes far beyond mere cryptography.

This book reviews multiple security threats and the strategies used to combat them, such as denial of service attacks, Trojan horses, and covert channels. In addition, it touches on the evolution of Java security from the restrictive days of the JDK 1.0 sandbox to the sophisticated security features available in Java 2, including a section that presents a list of 11 security bugs found in early versions of Java.

Because Java 2 security is now policy-based, it must be managed by system administrators as part of enterprise security. A chapter on Java 2 security presents the "big picture" as well as the classes used to implement policy-based security where developers can control access to an entire system like files, network resources, or runtime permissions on code. The book also discusses the rather primitive tools used for Java 2 security management such as the policytool utility. For advanced developers, further sections demonstrate how to create new permission classes and how to make JDK 1.1 security code migrate to Java 2.

A section on the Java Cryptography Architecture (JCA) shows that Java 2 supports the latest in encryption standards like SHA, DSA, RSA, and X.509 certificates. The text concludes with some well-considered predictions for the future of security on the Java platform. In the meantime, this book shows you what you will need to know about security when committing to Java 2 on the enterprise. Security is now part of the picture and will require both extra development time and administrative effort. --Richard Dragan

Book Description

"The book is of enormous consequence and potential value. The Java(TM) 2 Platform Security represents an advance of major proportions, and the information in this book is captured nowhere else." --Peter G. Neumann, Principal Scientist, SRI International Computer Science Lab, author of Computer-Related Risks, and Moderator of the Risks Forum

"Profound! There are a large number of security pearls. I enjoyed and was very impressed by both the depth and breadth of the book." --Stephen Northcutt, Director of Research for Intrusion Detection and Response, SANS Institute

Inside the Java(TM) 2 Platform Security is the definitive and comprehensive guide to the Java security platform. Written by the Chief Java Security Architect at Sun, it provides a detailed look into the central workings of the Java(TM) security architecture and describes security tools and techniques for successful implementation.

This book features detailed descriptions of the many enhancements incorporated within the security architecture that underlies the Java 2 platform. It also provides a practical guide to the deployment of Java security, and shows how to customize, extend, and refine the core security architecture. For those new to the topic, the book includes an overview of computer and network security concepts and an explanation of the basic Java security model.

You will find detailed discussions on such specific topics as:

* The original Java sandbox security model * The new Java 2 Platform permission hierarchy * How Java security supports the secure loading of classes * Java 2 access control mechanisms * Policy configuration * Digital certificates * Security tools, including Key Store and Jar Signer * Secure Java programming techniques * Ways to customize the Java security architecture with new permission types * How to move legacy security code onto the Java(TM) 2 Platform

In addition, the book discusses techniques for preserving object security-such as signing, sealing, and guarding objects-and outlines the Java cryptography architecture. Throughout, the book points out common mistakes and contains numerous code examples demonstrating the usage of classes and methods.

With this complete and authoritative guide, you will gain a deeper understanding into how and why the Java security technology functions as it does, and will be better able to utilize its sophisticated security capabilities in the development of your applications.

Customer Reviews:

Good book - Needs a complete revision from J2SE 1.4.2 .......2006-03-22

This book is certainly gives good introduction to the fundamentals of Java security. For those new to Java security, there is also brief intro to security of the Java language and platform. The coverage on Java Security APIs are bit narrow and needs lot of update on JCE, JAAS, JSSE etc.
Frankly speaking this book is a bit obsolete and now it's for the authors to come out with a new edition including Java 5 and Java 6 !

Go and buy this book.......2003-10-06

If you are new to Java, then you shouldn't buy this book.
If you are new to security, then you shouldn't buy this book.
If you prefer loads of examples instead of dense and precise explanations, then you shouldn't buy this book.
If you are looking for a pictorial guide on Java security, then you would probably have to go somewhere else as well.

However...

If you know your Java basics,
If you like completeness,
If you like preciseness,
If you want to know why the APIs look the way they do,
If you take nothing for granted,
If you want an update on latest changes,
If you like things to be drawn in a historical perspective,
If you want a book that you can pick up and read a chapter without having to go through it in a linear way,
If you are serious about security,
In that case you should now pick up your coat, and run to the nearest bookstore to buy this book.

The only thing I found odd in this book is the introduction into security, covering a discussion in general, and an overview of different types of security and access control models. The weird thing is that it introduces a lot of concepts, without actually refering to any of them in the chapters later on.

Required Reading for Java Security.......2003-08-04

The second edition is the most up-to-date Java security book for j2se v 1.4.x. A must-required reading for Java security platform written by Sun's Java security team. It describes the nuts and bolts in a readable language. Highly recommended.

Guardrails for JDK 1.2.......2003-07-29

If you are a Java developer, please read this book. It is complete in terms of the security hooks and accurate. It is a great book, deserving of five stars.

Not an easy read, but well worth the effort.......2002-01-04

I'm not surprised this book has drawn so many negative reviews. This book is indeed difficult to digest but then the Java Security model itself is rich, subtle and takes time to master. The book does an admirable job of explaining the motivation behind the complete overhaul of the Java 1.1 security architecture, the Java 2 security API design nuances, the flexibility of the fine-grained access-control model in Java 2 and how the backward compatibility concerns with code written with 1.1 style security checks were addressed in the new design. The book also has an intersting chapter addressing security needs of objects in transit (RMI) and a short chapter on cryptography, which anyway is a vast subject in its own right. The key chapters to read are the 3,4 and 5, especially for people who have some background in Java 2 security.

On the negative side, I have to say, the book is inconsistent in parts - I have trouble believing that Li Gong wrote the entire book himself. It's amazing to see chapters discussing at length how you install Java 2, change your CLASSPATH on different platforms etc. while in the same book elsewhere, you see terse, packed explanations about how the classloader hierarchy works in 1.2 or how the basic access control algorithm is extended for privileged operations and some very concise but useful discussions about possible design alternatives in the core library itself. The code samples are very insightful in that they illustrate the workings of some of the core library classes itself with the new security infrastrucure and not some toy samples. However, this also makes the book an unlikely candidate for gleaning ready to use code samples from, which means, if you are looking for how to's and not whys this is probably not the book for you, you might want to consider the Oreilly book.

For people well experienced in Java and OO design, if you want to learn insights about why the security apis are designed the way they are, you might well consider giving this book multiple reads. It's well worth the effort.

In short, this is a difficult but good book. Hopefully, in subsequent editions Li Gong would work on making it better, and also include more details on interesting new additions like JAAS etc.

Average customer rating:
Inside Java 2 Platform Security: Architecture, API Design, and Implementation (2nd Edition)
Gary Ellison, Mary Dageforde Li Gong
Manufacturer: Prentice Hall PTR
ProductGroup: Book
Binding: Paperback
ASIN: B000OOI270

Average customer rating:
Inside Java(TM) 2 Platform Security: Architecture, API Design, and Implementation
Li Gong
Manufacturer: Addison-Wesley Professional
ProductGroup: Book
Binding: Paperback
ASIN: B000OOGYGG

Book Description

Micro-credit is the latest development fashion, and has even received the ultimate accolade of a "world summit."

What is not appreciated is that there is a wide variety of quite different approaches to the profitable delivery of financial services to the poor. Such services are being and, indeed, have for many years been provided by different types of institutions, including traditional commercial banks, NGO’s, and the much publicized "new generation" institutions.

This book presents case studies from India, Bangladesh, East and Southern Africa, Indonesia and Latin America, together with many challenging comments and questions. The author, who has been teaching and studying this field for 25 years, reaches two conclusions: first, that there is no universally applicable methodology; and second, that well managed micro-finance can be profitable, both for its customers and providers. It presents a business opportunity for bankers, and need not depend on donor assistance.

Book Description

This book looks at the likely effects of this substantial transfer of powers to the Community brought about by the Amsterdam Treaty. How will the powers and responsibilities be divided? How should the powers be exercised? Will there be input from the public into policymaking? What role will Parliaments play? Will migrants suffer? The foremost scholars from many European countries try to answer these and other questions, offering a variety of legal and social viewpoints.

Book Description

This Proceedings contains the papers presented at the 10th IFAC Symposium on Automation in Mining, Mineral and Metal Processing (MMM 2001), held in Tokyo, Japan, on 4-6 September 2001.

This long-running symposium series has established a reputation for providing high-quality and authoritative surveys of the state of research in this economically and politically important application area. The latest conference lives up to this reputation, and this proceedings provides a truly international snapshot of quality research into several areas of mining, mineral and metal processing (MMM) technologies.

Historically, research into MMM has set the direction for other areas of automation, and this excellent collection of papers, totalling over 70, is well placed to continue in this tradition.

Average customer rating:

errors in Giancoli

Three words. Not very good.

Another Algebra-Based Physics Textbook!

A student's perspective

Informative

Physics: Principles with Applications Volume I (Ch. 1-15) (6th Edition)
Douglas C. Giancoli
Manufacturer: Prentice Hall
ProductGroup: Book
Binding: Paperback

General | Science | Subjects | Books
General | Physics | Science | Subjects | Books
General | Physics | Professional Science | Professional & Technical | Subjects | Books
All Titles | Qualifying Textbooks - Fall 2007 | Stores | Books
Professional | Qualifying Textbooks - Fall 2007 | Stores | Books
Science | Qualifying Textbooks - Fall 2007 | Stores | Books
Similar Items:

Physics: Principles with Applications Volume II (Ch. 16-33) (6th Edition)

Physics: Student Study Guide With Selected Solutions Vol. 1 6th Edition

Chemistry: The Central Science, Ninth Edition

3,000 Solved Problems in Physics (Schaum's Solved Problems) (Schaum's Solved Problems Series)

Physics: Principles with Applications (6th Edition)

ASIN: 013035256X

Book Description

This best-selling introduction to algebra-based physics goes beyond simple numerical problem solving and the application of formulas to challenge readers to explore the basic concepts that are fundamental to understanding physics and to apply physics to their everyday activities and interests (e.g., medicine, physiology, sports, and technology). Covers kinematics in one and two dimensions; vectors; dynamics; circular motion; gravitation; work and energy; linear momentum; rotational motion; bodies in equilibrium; elasticity and fracture; fluids; vibrations and waves; sound; temperature and kinetic theory; heat; and the Laws of Thermodynamics. Provides problem-solving notes; careful hints; problem-solving boxes; highlighted equations; and practice problems. Features photorealistic and 3D art to help readers visualize physics at work. For those in medical, agricultural, technology, and architectural fields needing a review of algebra-based physics.

Customer Reviews:

errors in Giancoli.......2007-09-21

6th Edition: For number 24, pg. 40, it is incorrect to ask about the "average acceleration" of the sprinter. One has to assume that the rate of acceleration is constant or one will not be able to solve the problem.

This is just one of many errors in this book, although none of the errors I have seen are severe.

The problem reads:
"A world-class sprinter can burst out of the blocks to essentially top speed of about 11.5 m/s in the first 15.0 m of the race. What is the average acceleration of the sprinter, and how long does it take her to reach top speed?"

To figure out why one cannot find the average acceleration without assuming that the acceleration is constant, imagine that the sprinter falls off the blocks, picks herself up and then blasts up to 11.5 m/s within the 15.0 m. Her average acceleration is (v - vo) / t, but t in this case is much larger than it would be compared to the normal situation where she pushes off and essentially accelerates uniformly. But remember, the problem only asks for average acceleration!

More mathematically to the point, let her velocity be v = c t^2, instead of the usual v = a t. This is not disallowed by the notion of average acceleration, but it does lead to different answers. Therefore, one needs the additional assumption that acceleration is constant.

Since runners don't accelerate at a uniform rate, we could state that we are simplifying the problem with this assumption, but Giancoli doesn't do this. This is an example of his sloppiness in the name of pedagogy.

Three words. Not very good........2007-07-04

Those three words really are a very good description. The book isn't very good at all. I used this book in AP Physics (B), in all honesty it was just terrible. It was uninteresting, and confusing. If you're going to buy an introductory Physics book, consider Physics (2 Vol. Set). But as always you can't really go off of another person's opinion, as everyone seems to learn best in their own unique styles, so scan through the books.

Another Algebra-Based Physics Textbook!.......2006-09-21

I have taken three straight years of Physics in highschool. I took it sophomore, junior, and now senior year. Each year, I used a different book. I was given this book for AP Physics B (Junior Year), an algebra-based Advanced Placement Physics course.

Overall, the book's examples don't truly help much with the more difficult problems. Explanations aren't very clear, and the key points aren't highlighted. Examples are boring, and questions are less than exciting. How am I to be motivated to perform numerous number crunches with algebra when the questions and writing are so dry?

There is a lot of information in this book, and some of the explanations are good (it's pretty difficult to mess up Kinematics), but the book stumbles in its explanations of many important Physics topics--including Fluid Mechanics and Modern Physics.

Overall, not a great text, but it is very difficult to find a nice Algebra-based Physics text that is as intellectually challenging and in depth. Be wary, if you are not a Physics geek, you will have a hard time plowing through this book.

A student's perspective.......2005-10-17

As one reviewer stated before me, these books are the reason why people are afraid of physics.

I have had the horrible misfortune of using this book during my senior year of high school...it is horrible...horrific...detestable...coarse to the mind. The most criminal error that I can point out is that this book does not have a GLOSSARY. A school textbook without a glossary? Give me a break.

The text reads like a conversation. Apparently Giancoli didn't pay very much attention in English class. One should not write educational text the way he or she speaks. One should state facts in a way that clearly defines what needs to be said. The positively criminal lingo of the book goes on tangents constantly and really breaks up the progression of the information.

Also, the author tends to call an element of a concept one thing, but substitute it with a variable that is totally different. It is clear that Giancoli assumed that everyone who was reading this book already knew physics vocabulary and was looking for a refresher course. Apparently Giancoli, the god of physics, could teach the experts more than they could ever dream. Throw me a bone here...his writing is crap. This book is being distributed to highschools and is also used at the university level. These are LEARNING stages. LEARNING. That's something that one can't do with this horrible book.

It's criminal. Absolutely criminal. Physics isn't a scary thing, nor is it impossible. Don't let books like these scare you away from the subject. It's just a few selfish, cocky scientists that wish to exclude others.

Giancoli, I hope your 6th edition was better...much better. Otherwise, schools will be wasting even more money on garbage.

Informative .......2005-03-23

Comprehensive and thorough. A must for anyone who needs an understanding of applying calculations to actions. I found this book to be even paced and very understandable.

Physics Principles with Applications Instructor's Solutions Manual (Giancoli, Volume 1)

Average customer rating:

Physics Principles with Applications Instructor's Solutions Manual (Giancoli, Volume 1)

Manufacturer: Pearson/Prentice Hall
ProductGroup: Book
Binding: Paperback
ASIN: B000EE58SQ

Physics: Principles with Applications, 1 (Physics)

Average customer rating:

A must for Physics teachers!

Physics: Principles with Applications, 1 (Physics)
Douglas C. Giancoli
Manufacturer: Prentice Hall
ProductGroup: Book
Binding: Paperback

General | Physics | Science | Subjects | Books

Customer Reviews:

A must for Physics teachers!.......2000-03-29

I've been teaching physics around the world for a number of years now and I have yet to find such a comprehensive text book for most international syllabi. It is complete and concise, full of practice problems for students. An ideal text book for any advanced physics course.

Average customer rating:

Another engaging book from Alexander McCall Smith

Savory

Another fun read by a prolific author

More tales of the absurd

Espresso Tales

Espresso Tales
Alexander Mccall Smith
Manufacturer: Anchor
ProductGroup: Book
Binding: Paperback

Comic | General | Literature & Fiction | Subjects | Books
Contemporary | General | Literature & Fiction | Subjects | Books
British | Short Stories | Literature & Fiction | Subjects | Books
General | British | World Literature | Literature & Fiction | Subjects | Books
Similar Items:

44 Scotland Street

The Right Attitude to Rain (Isabel Dalhousie Mysteries)

The Good Husband of Zebra Drive (No. 1 Ladies' Detective Agency 8)

Portuguese Irregular Verbs

At the Villa of Reduced Circumstances

ASIN: 0307275973
Release Date: 2006-07-11

Book Description

Alexander McCall Smith’s many fans will be pleased with this latest installment in the bestselling 44 Scotland Street series.

Back are all our favorite denizens of a Georgian townhouse in Edinburgh. Bertie the immensely talented six year old is now enrolled in kindergarten, and much to his dismay, has been clad in pink overalls for his first day of class. Bruce has lost his job as a surveyor, and between admiring glances in the mirror, is contemplating becoming a wine merchant. Pat is embarking on a new life at Edinburgh University and perhaps on a new relationship, courtesy of Domenica, her witty and worldly-wise neighbor. McCall Smith has much in store for them as the brief spell of glorious summer sunshine gives way to fall a season cursed with more traditionally Scottish weather.

Full of McCall Smith’s gentle humor and sympathy for his characters, Espresso Tales is also an affectionate portrait of a city and its people who, in the author’s own words, “make it one of the most vibrant and interesting places in the world.”

Customer Reviews:

Another engaging book from Alexander McCall Smith.......2007-07-29

This story was a fun, easy read with lots of good character development and interest to keep the pages turning. As usual, Mr. Smith has colorful, interesting characters, that pull you into their lives and cause you to psychoanalyze your own motives.

Savory.......2007-07-07

I actually had to pace myself, because I didn't want to finish to quickly and leave these wonderful characters of 44 Scotland Street. So many characters are gems, but the story that seems to hold the most interest is poor young Bertie and his overbearing monster of a mother. Can't wait for the third book this fall, and the knowledge that we'll luckily get to be with these interesting and offbeat inhabitants for a bit longer.

Another fun read by a prolific author.......2007-05-13

Alexander Mccall Smith has again produced another amusing tale with the characters of 44 Scotland Street. This sequel appeared as a column in "The Scotsman" and captures the lives of a diverse group of people. Smith's characters intrigue you--with all their idiosyncrasies and day-to-day dilemmas. Fun and light reading.

More tales of the absurd.......2007-05-01

I love a clever, witty, funny book, and this is another great one from Alexander McCall Smith. It was fun to hear the continuing saga of the denizens of 44 Scotland Street, and it's amazing to think that Smith wrote this in installments for the local paper. I particularly enjoyed the story of Bertie and his antics at school, including his new friends Tofu, Merlin, and Hiawatha.

I didn't enjoy this book as much as the first -- the sections about Ramsey Dumbarton were incredibly boring and I ended up skipping them -- but it was still quite entertaining.

Espresso Tales.......2007-03-25

I can't get enough of Mccall Smith. 44 and Espresso are delightful. I didn't agree that there were bits throughout that were boring. I find all the characters entertaining. I look forward to the next.

Average customer rating:

Espresso Tales

Manufacturer: Not Avail
ProductGroup: Book
Binding: Hardcover

Contemporary | General | Literature & Fiction | Subjects | Books
ASIN: 0739326465

Espresso Tales: 44 Scotland Street Volume 2

Average customer rating:

Espresso Tales: 44 Scotland Street Volume 2
Alexander McCall Smith
Manufacturer: audible.com
ProductGroup: Book
Binding: Audio Download
ASIN: B000NHG8HO

44 Scotland Street & Espresso Tales (44 Scotland Street, 1, 2)

Average customer rating:

44 Scotland Street & Espresso Tales (44 Scotland Street, 1, 2)
Alexander McCall Smith
Manufacturer: Anchor Books
ProductGroup: Book
Binding: Paperback

Product Description

The first 2 books in McCall Smith's delightful novels of life in Edinburgh, first written as a daily serial for The Scotsman.

Espresso Tales: The Latest from 44 Scotland Street

Average customer rating:

Espresso Tales: The Latest from 44 Scotland Street
Alexander McCall Smith
Manufacturer: Abacus
ProductGroup: Book
Binding: Paperback
ASIN: B000OIK8O6

Books:

Books Index

Books Home

Recommended Books