Hardening Security

The J2EE 1.3 specification and WAS provide a powerful infrastructure for implementing secure systems. Unfortunately, many people are not aware of all of the issues surrounding creating a secure WAS-based system. There are many degrees of freedom and many different sources of this information. This tends to lead to people overlooking WAS security issues and to deploying systems that are not particularly secure. This section summarizes the key issues of greatest importance.

Security hardening is the act of configuring WAS, developing applications, and configuring various other related components in a way to maximize security—in essence, to prevent or block various forms of attack. In order to do this effectively, it is important ...

Get IBM WebSphere: Deployment and Advanced Configuration now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.