Top : Computers : Programming : Languages : Java :
Security
Categories
| Books @ Cryptography Libraries @ Decompilers and Disassemblers @ Obfuscators @ |
Websites
FAQ on Java security with answers from the Princeton Secure Internet Programming team. By SIP, Princeton.
site exerpt
SIP: Java Security FAQ Nothing in life is completely secure; Java is no exception. Several specific security problems have been discovered and fixed since Java was first released. If you're using an up-to-date Web browser, you are usually safe against the known attacks. However,...Huge hotlist with commentary and searchable index of Java security resources, from the authors of the book "Securing Java". By Gary McGraw and Edward Felten.
http://www.rstcorp.com/javasecurity/links.html
Article on commonly asked questions regarding Java Applet Security.
site exerpt
Applet Security K is to enable browsers to run untrusted applets in a trusted environment. Our approach is to be conservative at first, and to add functionality when it can be added securely. The intent is to prevent applets from inspecting or...News, software, documentation, specifications, FAQs about Java security, by Sun.
http://java.sun.com/security/
An utility that lets you take control over which applets you want on your machine and which you don't. By SIP, Princeton.
site exerpt
The Java Filter While you are surfing the World Wide Web, you frequently come across pages that contain Java applets. These applets are small programs, written by people that you often don’t know or trust. However, their programs are being downloaded to, and...A listing of Java security bugs in reverse-chronological order, by Sun.
site exerpt
Chronology of security-related bugs and issues If you would like to send a description of a possible bug to the security team, send email to java-security@sun.com. November 19, 2002 CERT has reported a bug in the zlib compression library (see www.cert.org/advisories/CA-2002-07.html Sun's implementations of the Java...A utility that is a GUI version of the keytool provided with the Java SDK. [GPL]
site exerpt
KeyTool GUI I is no longer available from this site and has been superseded by KeyStore Explorer. Your browser will be redirected to the KeyStore Explorer web site in a moment. If your browser does not redirect in 5 seconds then click...Paper published in 1998 by Drew Dean, Edward Felten, Dan Wallach, and Dirk Balfanz. [Postscript format].
site exerpt
Resolution div neg scale isls{landplus90{VResolution 72 div vsize mul 0 exch}{Resolution -72 div hsize mul 0}ifelse TR}if Resolution VResolution vsize -72 div 1 add mul TR[matrix currentmatrix{dup dup round sub abs 0.00001 lt{round}if} forall round exch round exch]setmatrix}N landscape{/isls true...Describes security bugs in the 1.4.1_01 Java Runtime Environment.
site exerpt
Thursday 01st of December 2005 06:13:53 AM ...Allows security auditors to record and optimize permissions needed by Java applications.
site exerpt
jChains Sources from the official jchains source codedirectory 29.01.04 jChains has a GUI now (see screenshots below) dEscription This custom security manager framework records the permissions needed for the codebases (jars) of j2se applications running under access control of a security...Article that examines the foundation of Java security, including virtual machine and byte code security.
site exerpt
Secure your Java apps from end to end, Part 1 Virtual machine and byte code security Summary Security means many things to many people. For much of its history, Java security has meant virtual machine and byte code security. That notion neglects two equally important facets application and network security....Tutorial on Java Web Services Security and web application security.
http://java.sun.com/webservices/...tutorial/doc/WebAppSecurity.html
Article that examines various Java security services, including Java Security Manager, Security Provider Architecture, and Authentication components.
site exerpt
ONJava.com: Java and Security, Part 1 Logic filters connection requests. They also cover WebLogic's authentication and authorization framework and how it supports the standard J2EE security services. WebLogic provides a comprehensive suite of security services that can be used to protect all aspects of a domain...Java Security articles and presentations.
site exerpt
Java Security Research There is a continuing trend to cast real world business processes into electronic forms linking businesses to businesses and consumers to businesses via the Internet. Computer security has never been more important than now. Java, as a programming and runtime...Article that examines Java / JSP Application security, including common design flaws and vulnerabilities.
site exerpt
Java Web Application Security SCWCD Security Tutorial Web security can be defined in various ways, depending on individual points of view. The main focus of this article is the security of Java JSP applications developed and deployed for the Internet. Almost by its very nature, one of...Software suite providing Java SSH API, SSH Terminal, SSH secured VNC client, SFTP client and SSH Daemon.
site exerpt
SourceForge.net: SSHTools Provide feedback on this page Recently changed page Site Status SF.net Projects SSHTools Summary SSHTools Stats RSS Summary Admin Home Page Forums Tracker Bugs Patches Feature Requests Mail Tasks Screenshots News CVS Files Sponsored Downloads About SSHTools SSHTools is a...Article examining how to implement Java Single Sign-On based architecture and functionality
http://www-106.ibm.com/developerworks/java/library/j-gss-sso/
Guidelines and rules for writing security-critical Java code and applications.
site exerpt
DevResearch If you are implementing an application that makes use of untrusted, dynamically downloaded Java classes, you need to spend some time thinking about security issues. Your application will need a security policy and code that enforces that policy. Just as...Article that explains how to use JSSE and SSL for securing communication channels between Java applications.
site exerpt
Build secure network applications with SSL and the JSSE API Build secure network applications with SSL and the JSSE API Get started with SSL and JSSE using these two simple apps Summary SSL (Secure Socket Layer) is the de facto standard for securing a communication channel between two applications that...Java security and programming resources - articles, FAQs, and tips.
site exerpt
Java-Xpress Java Resources Here are selected best practices for creating EJBs for an enterprise-level distributed application supported by a J2EE-compliant application server such as the BEA WebLogic Server. Our assumption is that the developer is an intermediate-to-expert Java programmer who's familiar with writing...Excerpt from Java Security chapter from O'Reilly's "Java In A Nutshell" book.
site exerpt
Java programs can dynamically load Java classes from a variety of sources, including untrusted sources, such as web sites reached across an insecure network. The ability to create and work with such mobile code is one of the great strengths...Java 2 Security Quiz based on the book "Inside Java 2 Platform Security".
site exerpt
QUIZ: Inside Java 2 Platform Security, 2/e: Architecture, API Design and Implementation Quiz This quiz is based on the book, Inside Java 2 Platform Security, Second Edition: Architecture, API Design and Implementation published by Addison-Wesley. The quiz is based on material throughout the book. Test your knowledge of the Java 2 platform security...This short quiz tests your knowledge of the Java 2 security features.
site exerpt
Security Programming Quiz This short quiz tests your knowledge of the Java 2 security features. If you do not know an answer, take your best guess. 1. What does the java.security.manager option do? A. Starts an applet in a restricted environment. B. Starts...Articles on Java security architecture and security pitfalls
site exerpt
TenorLogic Java Security Resources Despite regular announcements of security vulnerabilities in software products, many programmers still tend to view security as a discipline that is separate from software engineering. For decades, the situation has been best summed up by a half-serious comment a professor...Tutorials on Java 2 Security features, including access control, digital signatures, and cryptography.
site exerpt
Security in Java 2 SDK 1.2 M security features protect you from malevolent programs. You'll see how to use tools to control access to resources, to generate and to check digital signatures, and to create and to manage keys needed for signature generation and checking. You'll...Articles on how to write secure Java code.
site exerpt
jAgile Secure Java Development Java developers should abide by. If you are responsible for managing Java developers, or if your business relies on the security of Java, make sure your developers follow these rules. The rules are based on much experience in hunting down...Guidelines on developing secure Java application using JDBC
site exerpt
Based on the previous discussion, there are two main JDBC scenarios to consider for security purposes: In the case of Java applications, the Java code is trusted We also consider trusted applets in this category for security purposes. In contrast,...Articles discussing J2EE / Java / Web Application security
site exerpt
Secure-Soft In an enterprise computing environment, failure, compromise, or lack of availability of computing resources can jeopardize the viability of the enterprise. An organization must take steps to identify threats to security. Once they are identified, steps should be taken to...Huge hotlist with commentary and searchable index of Java security resources, from the authors of the book "Securing Java". By Gary McGraw and Edward Felten.
http://www.cigital.com/javasecurity/links.html