J2EE Technology Main: Security
Articles:
- Graphs for security by Efraim Berkovich - [Clicks: 20]
Most programmers are familiar with the access-control list (ACL) as a datastructure used for authorization. This article describes using a more robust structure called an access-control graph (ACG). The ACG has several advantages over traditional ACL designs and has special relevance in Web-based applications.
[Includes source code]
http://www.javaworld.com/javaworld/jw-09-2004/jw-0913-acg.html - Sep, 2004 - Put Convenience into Web Applications by Brett Spell - [Clicks: 12]
Your application server doesn't provide for indefinite logon sessions in form-based authentication. Check out a custom authenticator that balances convenient logon features with security.
http://www.ftponline.com/javapro/2004_10/magazine/features/bspell/ - Sep, 2004 - Web app security using Struts, servlet filters, and custom taglibs by Swaminathan Radhakrishnan - [Clicks: 159]
Web-based business applications need stringent security regulations. Within an application, each different role requires a predetermined set of access rights. In this article, Swaminathan Radhakrishnan explains how you can use Struts, taglibs, and servlet filters to develop a powerful and flexible security model that can be used directly by almost any Web-based business application.
[Includes source code]
http://www-106.ibm.com/developerworks/web/library/wa-appsec/ - Sep, 2004 - J2EE security: Container versus custom by Brian Pontarelli - [Clicks: 27]
This article covers the factors to consider when choosing between custom security and J2EE standard security, also known as container security. It briefly covers how each type of security works and then illustrates their differences, strengths, and weaknesses. Although J2EE security itself applies to all components of an enterprise application, this discussion's main focus is Web application security or, more specifically, authentication.
http://www.javaworld.com/javaworld/jw-07-2004/jw-0726-security.html - Jul, 2004 - BASIC and FORM-based Authorization in Your Web Application by Olexiy Prokhorenko, Alexander Prohorenko - [Clicks: 31]
Learn how to work with the simplest yet rather convenient method of authorization.
http://www.developer.com/java/data/article.php/3335001 - Apr, 2004 - General-Purpose Authentication and Authorization for Webapps by Michael Nash - [Clicks: 31]
You may be more vulnerable than you think. If your applications interface with the Internet there are additional issues and options to consider.
http://www.developer.com/java/web/article.php/3319751 - Mar, 2004
[Top]
Books:[Top]
by Marco Pistoia, Larry Koved, Anthony Nadalin, Nataraj Nagaratnam - [Clicks: 17]
