J2EE™ Security for Servlets, EJBs and Web Services: Applying Theory and Standards to Practice

Distributed Application Security

Part 3, The Application, revolves around design, development and operation of secure and distributed applications developed in Java. These activities, in general terms, translate into the identification of application-specific security requirements, the selection of appropriate security API, mechanism and/or configuration elements, writing the corresponding code, and finally, testing it. The selection of appropriate security technology depends as much on the application-specific requirements as the distributed computing technology used to build the application.

We went over many different forms of distributed programs—socket-based programs; Java RMI-based programs; Web applications based on Servlets and JSPs; ...