Security Overview
Java Security Architecture
Access Control and Policy Files
Security Manager and Application Permissions
Public and Private Keys
Digital Signatures
Digital Certificates
Message Digests
Authentication Mechanisms
Basic and Form Authentication
Authentication vs. Authorization
Lazy Authentication
User Registries and LDAP Servers
JAAS
Exercise – Configuring and Authenticating a Web Application
Declarative Authorization
Container Based Security
Security: Declarative and Programmatic
Security Roles and Role Mappings
Exercise – Utilizing Form-based Authentication
Secure Coding Practices
Security Levels
Secure Coding Practices
Input Validation
Configuring and Implementing with the Struts Validator
Injection Flaws
Handling Cross-Site Scripting Conditions
Exercise – Utilizing Form-based Authentication
Secure Sockets Layer
Secure Sockets Layer (SSL) Basics
SSL Key Exchange
Java Secure Sockets Extension (JSSE)
Exercise – Enabling SSL in a Web Server Environment
Defining Web Services Security
WebSphere Security Model for Web Services
Identifying Security Challenges and Threats for Web Services
WS-Security Authentication
Security Assertion Markup Language (SAML)