Inside Java 2 Platform Security: Architecture, API Design, and Implementation

If you are new to Java, then you shouldn't buy this book.If you are new to security, then you shouldn't buy this book.If you prefer loads of examples instead of dense and precise explanations, then you shouldn't buy this book.If you are looking for a pictorial guide on Java security, then you would probably have to go somewhere else as well.However...If you know your Java basics,If you like completeness,If you like preciseness,If you want to know why the APIs look the way they do,If you take nothing for granted,If you want an update on latest changes,If you like things to be drawn in a historical perspective,If you want a book that you can pick up and read a chapter without having to go through it in a linear way, If you are serious about security, In that case you should now pick up your coat, and run to the nearest bookstore to buy this book. The only thing I found odd in this book is the introduction into security, covering a discussion in general, and an overview of different types of security and access control models. The weird thing is that it introduces a lot of concepts, without actually refering to any of them in the chapters later on.

The second edition is the most up-to-date Java security book for j2se v 1.4.x. A must-required reading for Java security platform written by Sun's Java security team. It describes the nuts and bolts in a readable language. Highly recommended.

If you are a Java developer, please read this book. It is complete in terms of the security hooks and accurate. It is a great book, deserving of five stars.

One of my coworkers asked me today whether I thought a Java based approach to email encryption was sensible; how could he evaluate the merits of the design? I told him the first thing I would do is get Li Gong's book "Inside Java 2 Platform Security," it is the most complete coverage of Java security available, and read it cover to cover. Then we could discuss the problem in depth.

This book provides comprehensive coverage of the Java Security Architecture. As with all good security books, this one begins with an introduction to the fundamentals of computer and network security. For those new to Java security, there is also brief intro to security of the Java language and platform. The book quickly gets into the details of the new Security Architecture, with a detailed description of what is there, why it is there and how to use it. Sections on deploying and customizing the SA are of practical use to anyone in this situation. The book also contains a concise and useful discussion of object security and how to go about getting it. There is a detailed discussion of the Java Cryptography Architecture, a must if you plan on using the cryptographic functionality. The book concludes with a thought-provoking section on future directions. This book stands out because of the insightful discussions on why design decisions were made and the implications of these decisions. This makes the book interesting reading even if you aren't going to implement the SA in the immediate future. If you are planning on implementing the SA, don't do it without this book within grabbing distance.