Ajax in Action

Core J2EE Patterns: Best Practices and Design Strategies, Second Edition

Service-Oriented Architecture (SOA): Concepts, Technology, and Design

Service-Oriented Architecture : A Field Guide to Integrating XML and Web Services

POJOs in Action: Developing Enterprise Applications with Lightweight Frameworks

Java

Core Security Patterns : Best Practices and Strategies for J2EE(TM), Web Services, and Identity Management (Core)

Format: Hardcover
Author: Christopher Steel
ReleaseDate: 14 October, 2005
Publisher: Prentice Hall PTR
Rating:

A classic security book for java guys
I am really amazed to see, this is the only book in the market to illustrate how to put together all three factors of authentication in a j2ee application. I picked this book to read about using smartcard and biometrics in j2ee application. More compelling, the authors did a terrific job to cover every possible security option that adds value to j2ee application. The patterns and best practices for application security architecture and design strategies for the presentation tier, business tier, and Webservices tier of j2ee platform are very promising and helpful.
Overall this book unites security and identity management technologies and related Java APIs with insightful answers to whys, whens and hows of using them.

A required reading for anyone involved with Java security.

Recommended for All Security Architects
I'd recommend this book to developers and architects of web services and web applications regardless of their preferred development environment. I have found all the Sun "Core" Java books to be at cut above, but this one differs in that while obviously Java-centric, much of the patterns dicussed are relevant to all development platforms. .

The *ONLY* Working JAAS Example
. Considering how many other completely useless WS-Security references (and websites, and example programs, and.. ) I've been through, it was a huge relief to FINALLY find one that contains WORKING code for JAAS authorization. Even though I still don't have all the answers I need (thanks to truely hideous examples and the complete and utter lack of any worthwhile or accurate documentation in JWSDP 2. 0) this book is worth its weight in gold, AFAIC.