Building Java™ Enterprise Systems with J2EE™

Chapter 25. Security Basics

IN THIS CHAPTER

• The Basic Security Model

• Cryptography

• Authentication and Nonrepudiation

• Secure Socket Layer (SSL)

• Access Control

• Domains

• Auditing

• Policies and Administration

Out of all assurance facets described in Chapter 24, "High-Assurance Enterprise Applications," enterprise security represents perhaps the most important and widely needed assurance requirement. Because enterprise systems pertain to large-scale systems with large business needs, the cost associated with a breach of security in an enterprise system can be high. Furthermore, because security problems are human-induced problems, the range of possible problems is as limitless as the human mind. Security thus becomes a big problem to solve.

Because of the significant ...