Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management

Chapter 8. The Alchemy of Security Design–Methodology, Patterns, and Reality Checks

Topics in This Chapter

• The Rationale

• Secure UP

• Security Patterns

• Security Patterns for J2EE, Web Services, Identity Management, and Service Provisioning

• Reality Checks

• Security Testing

• Adopting a Security Framework

• Refactoring Security Design

• Service Continuity and Recovery

• Conclusion

In a typical application development environment, architects and developers share similar experiences. They deploy business applications in a highly compressed time frame—making the applications work, testing the functionality at all levels, ensuring that they meet expected system performance or service levels, and wrapping the applications with an attractive client presentation and user documentation. ...