Spring Security 3.1 - Softcover

Winch, Robert

Softcover

ISBN 10: 1849518262 ISBN 13: 9781849518260

Publisher: Packt Pub Ltd, 2012

Synopsis

This book demonstrates how to secure your Java applications from hackers using Spring Security 3.1. With plenty of handholding, it takes you step by step through every stage, accompanied by sample code and useful screenshots.

• Learn to leverage the power of Spring Security to keep intruders at bay through simple examples that illustrate real world problems
• Each sample demonstrates key concepts allowing you to build your knowledge of the architecture in a practical and incremental way
• Filled with samples that clearly illustrate how to integrate with the technologies and frameworks of your choice

In Detail

Knowing that experienced hackers are itching to test your skills makes security one of the most difficult and high-pressure concerns of creating an application. The complexity of properly securing an application is compounded when you must also integrate this factor with existing code, new technologies, and other frameworks. Use this book to easily secure your Java application with the tried and trusted Spring Security framework, a powerful and highly customizable authentication and access-control framework.

"Spring Security 3.1" is an incremental guide that will teach you how to protect your application from malicious users. You will learn how to cleanly integrate Spring Security into your application using the latest technologies and frameworks with the help of detailed examples.

This book is centred around a security audit of an insecure application and then modifying the sample to resolve the issues found in the audit.

The book starts by integrating a variety of authentication mechanisms. It then demonstrates how to properly restrict access to your application. It concludes with tips on integrating with some of the more popular web frameworks. An example of how Spring Security defends against session fixation, moves into concurrency control, and how you can utilize session management for administrative functions is also included.

"Spring Security 3.1" will ensure that integrating with Spring Security is seamless from start to finish.

What you will learn from this book

• Understand common security vulnerabilities and how to resolve them
• Implement authentication and authorization
• Learn to utilize existing corporate infrastructure such as LDAP, Active Directory, Kerberos, and CAS
• Integrate with popular frameworks such as Spring, JSF, GWT, Maven, and Spring Roo
• Architect solutions that leverage the full power of Spring Security while remaining loosely coupled
• Implement common scenarios such as supporting existing user stores, user sign up, and supporting AJAX requests

Approach

This practical step-by-step tutorial has plenty of example code coupled with the necessary screenshots and clear narration so that grasping content is made easier and quicker.

Who this book is written for

This book is intended for Java web developers and assumes a basic understanding of creating Java web applications, XML, and the Spring Framework. You are not assumed to have any previous experience with Spring Security.

About this title

About the Author

Robert Winch

Robert Winch is currently a Senior Software Engineer at VMware and is the project lead of the Spring Security framework. In the past he has worked as a Software Architect at Cerner, the largest provider of electronic medical systems in the US. Throughout his career he has developed hands on experience in integrating Spring Security with an array of security standards (i.e. LDAP, SAML, CAS, OAuth, etc). Before he was employed at Cerner, he worked as an independent web contractor in proteomics research at Loyola University, Chicago, and on the Globus Toolkit at Argonne National Laboratory.

Edition details

• Publisher: Packt Pub Ltd
• Publication date: 2012
• ISBN 10: 1849518262
• ISBN 13: 9781849518260
• Binding: Paperback
• Language: English
• Number of pages: 456