Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management

Chapter 14. Building End-to-End Security Architecture–A Case Study

Topics in This Chapter

• Overview

• Use Case Scenarios

• Application Architecture

• Security Architecture

• Design

• Development

• Testing

• Deployment

• Summary

• Lessons Learned

• Pitfalls

• Conclusion

The objective of this case study is to use a simplified real-world example of a Web portal to illustrate how to define and implement an end-to-end security solution using the security design methodology, design patterns, and best practices introduced in this book. Real-life business scenarios are usually complex and may be full of many constraints that are difficult to generalize for a case study. This case study is intended to encapsulate the complexity of a typical multi-tier application environment that includes ...