Java Security: Hostile Applets, Holes and Antidotes - What Every Netscape and Internet Explorer Needs to Know

"This book is mandatory reading for every user and developer of webware." —Peter G. Neumann Moderator of the Risks Forum

Do you know how to sort out fact from fiction when it comes to Java security? Did you know that whenever you surf the Web with Netscape or Internet Explorer you are using Java? That means that someone else's code is running untested on your computer. Don't wait for a hostile applet to show you how vulnerable your site is. International security experts Gary McGraw and Edward Felten —leader of the famed Princeton team —tell you how Java security works, and how it doesn't.

McGraw and Felten give you all the information you need to create a reasonable Java use strategy. Java Security gives you:

• Guidelines for using Java more safely today
• What to expect in the Java security future
• A clear treatment of the risks of using Java
• Vital information explaining the three prongs of the Java security model: the Byte Code Verifier, the Applet Class Loader, and the Security Manager
• Clear explanations of holes in the Java security model

Whether you're a webmaster, an information technology manager charged with creating an intelligent security policy for your organization, or a concerned Web user, this book is must reading.

visit this book's companion web site at: http://www.rstcorp.com/java-security.html

visit our web site at: Ihttp://www.wiley.com/compbooks/

GARY McGRAW, PhD, is a research scientist with Reliable Software Technologies Corporation and a frequent speaker on Java security. In addition to his work in artificial intelligence, cognitive science, and computer security, Dr. McGraw is an accomplished webmaster who is currently managing three sites.

EDWARD W. FELTEN, PhD, teaches computer science at Princeton University and heads up Princeton's Safe Internet Programming team which consults to companies such as Microsoft, Netscape, and Sun. The team is famous for having discovered most of the holes in the Java security model.