Securing Java : Getting Down to Business With Mobile Code

Customers who bought this book also bought:

Java Distributed Objects (Sams Professional Series); Bill McCarty, Luke Cassady-Dorion
Java Security; Scott Oaks
Java in Practice : Design Styles and Idioms for Effective Java; Nigel Warren, et al
Java Cryptography; Jonathan Knudsen

Reviews
Amazon.com
The Java environment is relatively secure, as far as network programming languages go. Java has strong security, but not perfect security. Securing Java explains the known security problems with the language and points out steps that programmers can take to prevent bad guys from taking advantage of their Java-based systems.

Authors Gary McGraw and Edward W. Felten begin with the sandbox--the original Java security model. They then explain why the sandbox, while secure, was too restrictive and was combined with a code-signing model in Java 2.

After explaining how security ought to work, Securing Java reveals a menagerie of applets that have circumvented Java security to achieve a variety of noisome and damaging ends. The authors reveal enough information about these applets to show where the dangers are, and they offer security tips for programmers and network administrators.

McGraw and Felten include a brief but well-informed chapter about the security issues raised by the Java Card environment and smart cards generally. A couple of question-and-answer sections toward the end of Securing Java also deserve special recognition. One, on Java security as a whole, provides succinct and accurate answers to questions about how secure Java is and what you can do to minimize your Java security risk. The other Q&A section compares--fairly and with plenty of information--the security features of Java and ActiveX. --David Wall

Book Description
The world's leading mobile code security experts lead Web users, managers, developers, and system administrators through the uncharted waters of Java 2 security. The book thoroughly examines the signature-based Java 2 security model, and includes coverage of ActiveX, Java smart cards, trust-based policy management, plus much more.

Synopsis
Leading experts in Java show programmers and developers how to guard against vulnerabilities and ensure Web security. The book thoroughly examines the capabilities and flaws of the new JDK 1.2 security model and adds vital coverage of ActiveX Smart Card security, Web proofing, transitioning from TCB to "complete untrust", plus much more.

Back to Security
Back to Internet Security and Encryption
Back to Main Index