Duration
3 days
Chapter 1 Java Application Security
- What Is Security?
- Software Used in This Book
- The Java Sandbox
- Security Debugging
- Summary
Chapter 2 The Default Sandbox
- Elements of the Java Sandbox
- Permissions
- Keystores
- Code Sources
- Policy Files
- The Default Sandbox
- The java.security File
- Comparison with Previous Releases
- Summary
Chapter 3 Java Language Security
- Java Language Security Constructs
- Enforcement of the Java Language Rules
- Comparisons with Previous Releases
- Summary
Chapter 4 The Security Manager
- Overview of the Security Manager
- Operating on the Security Manager
- Methods of the Security Manager
- Comparison with Previous Releases
- Summary
Chapter 5 The Access Controller
- The CodeSource Class
- Permissions
- The Policy Class
- Protection Domains
- The AccessController Class
- Guarded Objects
- Comparison with Previous Releases
- Summary
Chapter 6 Java Class Loaders
- The Class Loader and Namespaces
- Class Loading Architecture
- Implementing a Class Loader
- Miscellaneous Class Loading Topics
- Comparison with Previous Releases
- Summary
Chapter 7 Introduction to Cryptography
- The Need for Authentication
- The Role of Authentication
- Cryptographic Engines
- Summary
Chapter 8 Security Providers
- The Architecture of Security Providers
- The Provider Class
- The Security Class
- The Architecture of Engine Classes
- Comparison with Previous Releases
- Summary
Chapter 9 Keys and Certificates
- Keys
- Generating Keys
- Key Factories
- Certificates
- Keys, Certificates, and Object Serialization
- Comparison with Previous Releases
- Summary
Chapter 10 Key Management
- Key Management Terms
- The keytool
- The Key Management API
- A Key Management Example
- Secret Key Management
- Comparison with Previous Releases
- Summary
Chapter 11 Message Digests
- Using the Message Digest Class
- Secure Message Digests
- Message Digest Streams
- Implementing a MessageDigest Class
- Comparison with Previous Releases
- Summary
Chapter 12 Digital Signatures
- The Signature Class
- Signed Classes
- Implementing a Signature Class
- Comparison with Previous Releases
- Summary
Chapter 13 Cipher-Based Encryption
- The Cipher Engine
- Cipher Streams
- Sealed Objects
- Comparison with Previous Releases
- Summary
Chapter 14 SSL and HTTPS
- An Overview of SSL and JSSE
- SSL Client and Server Sockets
- SSL Sessions
- SSL Contexts and Key Managers
- Miscellaneous SSL Issues
- The HTTPS Protocol Handler
- Debugging JSSE
- Summary
Chapter 15 Authentication and Authorization
- JAAS Overview
- Simple JAAS programming
- Simple JAAS Administration
- Advanced JAAS Topics
- Summary
- Appendix The java.security File
- Appendix Security Resources
- Security Bugs
- Third-Party Security Providers
- Security References
- Appendix Identity-Based Key Management
- Javakey
- Identities
- Identity Scopes
- Key Management in an Identity Scope
- Summary
- Appendix The Secure Java Container
- The 1.1-Based Class Loader
- The 1.1-Based Security Manager
- Running Secure Applications
- Summary
- Appendix Implementing a JCE Security Provider
- Appendix Quick Reference
- Package java.security
- Package java.security.cert
- Package java.security.interfaces
- Package java.security.spec
- Package javax.crypto
- Package javax.crypto.interfaces
- Package javax.crypto.spec
- Package javax.net
- Package javax.net.ssl
- Package javax.security.auth
- Package javax.security.auth.callback
- Package javax.security.auth.login
- Package javax.security.auth.spi
- Package javax.security.cert
- Package com.sun.net.ssl
- Package com.sun.security.auth
- Package com.sun.security.auth.login
- Package com.sun.security.auth.module
- Miscellaneous Packages
- Colophon
Programme scope, delivery arrangements and suitability are confirmed during enquiry.