Java Security Handbook

This book has been very helpful for me so far in practice. There are many different aspects of security in Java from JAAS to J2EE to JCE, etc. He goes through and gives a decent synopsis for all of these areas. This book is good to have for these overviews. If you're going to really dive into an area of Java security, you'll probably need more information but he does a decent job providing the starting point. I found the examples very helpful especially in the JCE sections. The thing I really like is that my project managers seem to be very interested in some newer items like JAAS and JSSE and this book provides information in those areas.

Java Security Handbook is the latest Java book from Macmillan USA SAMS. It is authored by Jamie Jaworski and Paul Perrone, both of whom have authored some other good books in the past. Anyway, if you are an enterprise Java developer, this is really a must have.It is well organized, and covers security policy formulation and analysis, as well as the latest on Java Security, including Java cryptography (JCE), security mathematics, SSL, JAAS, and the latest extensions. But then it also has a special focus on J2EE security features and applications of security for enterprise Java application development by covering Java Networking and Jini security, EJB Security, Servlet and JSP security, JDBC/database security, etc. Overall, it is by far the most up-to-date, comprehensive treatment of the subject. It is unique in its coverage of J2EE security as well.[...]