Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management

Chapter 4. Java Extensible Security Architecture and APIs

Topics in This Chapter

• Java Extensible Security Architecture

• Java Cryptography Architecture (JCA)

• Java Cryptographic Extensions (JCE)

• Java Certification Path API (CertPath)

• Java Secure Socket Extension (JSSE)

• Java Authentication and Authorization Service (JAAS)

• Java Generic Secure Services API (JGSS)

• Simple Authentication and Security Layer (SASL)

Building end-to-end security of an application mandates a security architecture beyond the application’s underlying runtime platform. Security must be extended at all levels, including users, components, services, and communications. Without any compromise, the application security infrastructure must address the core security requirements of maintaining ...