Inside Java(TM) 2 Platform Security: Architecture, API Design, and Implementation

Inside Java(TM) 2 Platform Security: Architecture, API Design, and Implementation


An expert tour of security on the new Java 2 platform, Inside Java 2 Security will find an enthusiastic audience among advanced Java developers and system administrators. As the author notes during the general discussion on network security, safeguarding your system goes far beyond mere cryptography.

This book reviews multiple security threats and the strategies used to combat them, such as denial of service attacks, Trojan horses, and covert channels. In addition, it touches on the evolution of Java security from the restrictive days of the JDK 1.0 sandbox to the sophisticated security features available in Java 2, including a section that presents a list of 11 security bugs found in early versions of Java.

Because Java 2 security is now policy-based, it must be managed by system administrators as part of enterprise security. A chapter on Java 2 security presents the "big picture" as well as the classes used to implement policy-based security where developers can control access to an entire system like files, network resources, or runtime permissions on code. The book also discusses the rather primitive tools used for Java 2 security management such as the policytool utility. For advanced developers, further sections demonstrate how to create new permission classes and how to make JDK 1.1 security code migrate to Java 2.

A section on the Java Cryptography Architecture (JCA) shows that Java 2 supports the latest in encryption standards like SHA, DSA, RSA, and X.509 certificates. The text concludes with some well-considered predictions for the future of security on the Java platform. In the meantime, this book shows you what you will need to know about security when committing to Java 2 on the enterprise. Security is now part of the picture and will require both extra development time and administrative effort. --Richard Dragan

Inside Java 2 Platform Security: Architecture, API Design, and Implementation, Second Edition

Inside Java 2 Platform Security: Architecture, API Design, and Implementation, Second Edition


Inside Java(TM) 2 Platform Security, the definitive and comprehensive guide to the Java security platform, has been thoroughly updated to reflect key additions and revisions to Java security technologies currently in use by leading technology companies. This second edition, penned by the Java experts at Sun Microsystems, provides a detailed look into the central workings of the Java security architecture and describes tools and techniques for successful implementation on even the most demanding network computing environment.

While Java has always provided a stronger security model than other platforms, this book reviews all the methods and practices required to improve security without sacrificing functionality. With tips on how to customize, extend, and refine the Java security architecture, users will have everything they need to protect their information assets from both external and internal threats.

This book's in-depth coverage encompasses security architecture, deployment, customization, new developments, and much more.

-Security fundamentals
-Secure class loading
-Specifying fine-grained security policy
-Enforcing security policy with AccessController, SecurityManager, and more
-Digital certificates, certification paths, signed code, JAAS, and other authentication measures
-Java-based cryptography with code examples
-JSSE, Java GSS-API, and RMI for network security
-Previews of other platforms for security, including Java Card, J2ME and Jini

Designed for both the system administrator and software practitioner, this book delivers vital knowledge for building and maintaining a secure system using the Java 2 platform. With detailed code and usage examples throughout, Inside Java(TM) 2 Platform Security, Second Edition, is an indispensable resource for all platform security needs.

The Java(TM) Series is supported, endorsed, and authored by the creators of the Java technology at Sun Microsystems, Inc. It is the official place to go for complete, expert, and definitive information on Java technology. The books in this Series provide the inside information you need to build effective, robust, and portable applications and applets. The Series is an indispensable resource for anyone targeting the Java(TM) 2 platform.

Herb Schildt's Java Programming Cookbook

Herb Schildt's Java Programming Cookbook

Your Ultimate "How-To" Guide to Java Programming!

Legendary programming author Herb Schildt shares some of his favorite programming techniques in this high-powered Java "cookbook." Organized for quick reference, each recipe shows how to accomplish a practical programming task. A recipe begins with a list of key ingredients (the classes, methods, and interfaces) followed by step-by-step instructions that show how to assemble them into a complete solution. Detailed discussions explain the how and why behind each step, and a full code example puts the recipe into action. Each recipe ends with a list of options and alternatives that suggest ways to adapt the technique to fit a variety of situations. Whether you're a beginner or an experienced pro, you'll find recipes that are sure to satisfy your Java programming appetite!

Topics include:

• String Handling
• Regular Expressions
• File Handling
• Applets
• Servlets
• Swing
• The Collections Framework
• Multithreading
• Formatting Data

Learn how to:

• Find substrings that match a regular expression
• Use regular expressions to tokenize a string
• Compress and decompress data files
• Create a ZIP file
• Format time and date
• Use printf( ) to display formatted data
• Reverse, rotate, and shuffle a list
• Use a Comparator with a collection
• Create a simple Swing application
• Create a Swing-based applet
• Create a simple servlet
• Use a cookie with a servlet
• Synchronize threads
• Monitor a thread's state
• Set and obtain a thread's priority
• Use JScrollPane to automate scrolling
• Access a resource using HttpURLConnection
• Schedule a task for future execution
• Use reflection to dynamically create an object and call methods
• Much, much more

Head First Java, 2nd Edition

Head First Java, 2nd Edition

Hardcore Java

Hardcore Java

Hardcore Java is an advanced book that focuses on the little-touched but critical parts of the Java programming language that expert programmers use. We're not talking about trivial things; we're talking about difficult but extremely powerful and useful programming techniques like reflection, advanced data modeling, advanced GUI design, and advanced aspects of JDO, EJB and XML-based web clients. This unique book reveals the true wizardry behind the complex and often-mysterious Java environment.

Ground-Up Java

Ground-Up Java


Learn Java From the Ground-Up—With Animated Illustrations that You Manipulate

This is the first effective Java book for true beginners. Sure, books before now focused on basic concepts and key techniques, and some even provided working examples on CD. Still, they lacked the power to transform someone with no programming experience into someone who sees, who really "gets it."

Working with Ground-Up Java, you will definitely get it. This is due to the clarity of Phil Heller's explanations, and the smoothly flowing organization of his instruction. He's one of the best Java trainers around.

But what's really revolutionary are his more than 30 animated illustrations, which you'll find on the enclosed CD. Each of these small programs, visual and interactive in nature, vividly demonstrates how its source code works. You can modify it in different ways, distinctly altering the behavior of the program. As you experiment with these tools—and you can play with them for hours—you'll gain both the skills and the fundamental understanding needed to complete each chapter's exercises, which steadily increase in sophistication. No other beginning Java book can take you so far, so quickly, and none will be half as much fun.

Note: CD-ROM/DVD and other supplementary materials are not included as part of eBook file.

Google Web Toolkit Solutions: More Cool & Useful Stuff

Google Web Toolkit Solutions: More Cool & Useful Stuff

Cutting-Edge GWT: Advanced Recipes for Java Developers

Google Web Toolkit (GWT) is an open source Java development framework for building Ajax-enabled web applications. Instead of the hodgepodge of technologies that developers typically use for Ajax–JavaScript, HTML, CSS, and XMLHttpRequest–GWT lets developers implement rich client applications with pure Java, using familiar idioms from the AWT, Swing, and SWT. GWT goes beyond most Ajax frameworks by making it easy to build desktop-like applications that run in the ubiquitous browser, where the richness of the user interface is limited only by the developer’s imagination.

This book focuses on the more advanced aspects of GWT that you need to implement real-world applications with rich user interfaces but without the heavy lifting of JavaScript and other Ajax-related technologies. Each solution in this practical, hands-on book is more than a recipe. The sample programs are carefully explained in detail to help you quickly master advanced GWT techniques, such as implementing drag-and-drop, integrating JavaScript libraries, and using advanced event handling methodologies.

Solutions covered include

• Building custom GWT widgets, including both high-level composites and low-level components

• Implementing a viewport class that includes iPhone-style automated scrolling

• Integrating web services with GWT applications

• Incorporating the Script.aculo.us JavaScript framework into GWT applications

• Combining Hibernate and GWT to implement database-backed web applications

• Extending the GWT PopupPanel class to implement a draggable and resizable window

• Creating a drag-and-drop module, complete with drag sources and drop targets

• Deploying GWT applications to an external server

• Dynamically resizing flex tables

• Using GWT widgets in legacy applications developed with other frameworks, such as Struts and JavaServer Faces

Complete Sample Code Available at www.coolandusefulgwt.com

All of the code used in this book has been tested, both in hosted and web modes, and in an external version of Tomcat (version 5.5.17), under Windows, Linux, and Mac OS X. For Windows and Linux, we used 1.4.60, and for the Mac we used 1.4.61. NOTE: There are three separate versions of the code. Please download the correct JAR file for the operating system you are using.

Foreword xiii

Preface xvi

Acknowledgments xviii

About the Authors xix

Solution 1: GWT Fundamentals and Beyond 1

Solution 2: JavaScript Integration 53

Solution 3: Custom Widget Implementation 71

Solution 4: Viewports and Maps 103

Solution 5: Access to Online Web Services 133

Solution 6: Drag and Drop 167

Solution 7: Simple Windows 199

Solution 8: Flex Tables 237

Solution 9: File Uploads 283

Solution 10: Hibernate Integration 303

Solution 11: Deployment to an External Server 325

Solution 12: GWT and Legacy Code 343

Index 371