Java Security and Protection Domains

Java security is concerned with two protection domains or areas of the program environment where we will apply security: the application protection domain and the system protection domain.

The exact configuration of the application protection domain depends on the needs of the particular application. The Java language does not provide a general solution that applies to all application security, but instead provides the the Java Authentication and Authorization (JAAS) package to allow custom security solutions to be developed. We will examine the JAAS package in Chapter 9.

Java system security is concerned with program operations at the system level. This includes accessing disk resources and network connections. ...

Get J2EE™ and Beyond: Design, Develop, and Deploy World-Class Java™ Software now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.