JAVA 2 Network Security (2nd Edition)

Rather than focusing on how a Java system can be broken, the authors show managers, network administrators, developers, and security professionals how Java can be made secure and how to exploit its strengths. Topics include the pros and cons of each Java security alternative; architectural techniques for maximizing security; securing Web and intranet applications; deploying or limiting Java across firewalls; integrating Java and SSL; and using Java's Cryptography APIs. The disk contains source code and links to Java security Web sites. Annotation c. Book News, Inc., Portland, OR (booknews.com)

The Team That Wrote This Redbook

This redbook was produced by a team of specialists from around the world working at the International Technical Support Organization Raleigh Center.

The leader of this project was Marco Pistoia.

Marco Pistoia is a Network Security Specialist, working as a project leader at the International Technical Support Organization, Raleigh Center. He writes extensively and teaches IBM classes worldwide on all areas of the e-business Application Framework, WebSphere, Java and Internet security. Marco holds a degree with honors in Pure Mathematics from the University of Rome and a masters degree in Computer Science. Before joining the ITSO, he was a System Engineer in IBM Italy. He received an Outstanding Technical Achievement Award in 1996.

Duane F. Reller is a Senior Software Engineer in the System/390 Programming Laboratory in Endicott, New York, USA. He has 25 years of experience in System/390 Hardware and Software development. He holds a Bachelor's degree in Electrical Technology and a Master of Science degree in Computer Science from the State University of New York at Binghamton. His areas of expertise include Hardware and Software System's Architecture and Management.

Deepak Gupta is a Senior Software Engineer in IBM, India. He has two and a half years of experience in Internet technologies. He holds a degree in Electronics and Communications from the University of Roorkee, India. His areas of expertise include Internet security and Electronic Commerce. Deepak was involved in IBM India's largest e-Commerce project and in India's first secured e-Commerce site allowing Rupee-based transactions, for which he was conferred the Employee of the Month Award. He has also given several talks on Internet security and e-Commerce.

Milind Nagnur is a Senior Associate in the Operations and Systems Risk Management (OSRM) group of Price Waterhouse Coopers in Mumbia, India. He has a couple of years exposure in Internet technologies, with emphasis on security and control issues in real business applications. He holds a degree in Mechanical Engineering from the Indian Institute in Bombay, India, and an MBA from the Indian Institute of Management in Calcutta, India.

Ashok K. Ramani is a Senior Software Engineer in IBM India. He has two and a half years experience in Internet technologies. He holds a degree in MSc.(Tech) Information Systems from the Birla Institute of Technology and Science, Pilani, India. His areas of expertise include Internet security and Electronic Commerce. Ashok was involved in IBM India's largest e-Commerce project and India's first secure e-Commerce site allowing Rupee-based transactions for which he was conferred the Employee of the Month Award. He has won special recognition awards at IBM India for his contribution to e-Commerce projects. He has also presented several talks on Internet security and e-Commerce.

Thanks to the following people for their invaluable contributions to this project:

Anthony J. Nadalin, Julianne Yarsa, Shirley Fox, Donna Smith Skibbie, Bruce Rich IBM Enterprise Security, Austin Center

Larry Koved IBM, Thomas J. Watson Research, Hawthorne

Li Gong, Jan Luehe, Roland Schemers Sun Microsystems, Inc.

Pat Donleycott, Jorge Ferrari, Martin Murhammer, Gail Christensen, Margaret Ticknor, Shawn Walsh, Linda Robinson, Tate Renner IBM, International Technical Support Organization, Raleigh Center

Rob Macgregor, Dave Durbin, John Owlett, Andrew Yeomans Authors of the first edition

Pete Lawther, Simon Phipps Contributors to the first edition