Securing Java: Getting Down to Business with Mobile Code, 2nd Edition: Amazon.ca: Gary McGraw, Edward W. Felten: Books

Product Description

From Amazon

The Java environment is relatively secure, as far as network programming languages go. Java has strong security, but not perfect security. Securing Java explains the known security problems with the language and points out steps that programmers can take to prevent bad guys from taking advantage of their Java-based systems.

Authors Gary McGraw and Edward W. Felten begin with the sandbox--the original Java security model. They then explain why the sandbox, while secure, was too restrictive and was combined with a code-signing model in Java 2.

After explaining how security ought to work, Securing Java reveals a menagerie of applets that have circumvented Java security to achieve a variety of noisome and damaging ends. The authors reveal enough information about these applets to show where the dangers are, and they offer security tips for programmers and network administrators.

McGraw and Felten include a brief but well-informed chapter about the security issues raised by the Java Card environment and smart cards generally. A couple of question-and-answer sections toward the end of Securing Java also deserve special recognition. One, on Java security as a whole, provides succinct and accurate answers to questions about how secure Java is and what you can do to minimize your Java security risk. The other Q&A section compares--fairly and with plenty of information--the security features of Java and ActiveX. --David Wall

Book Description

The world's leading mobile code security experts lead Web users, managers, developers, and system administrators through the uncharted waters of Java 2 security. The book thoroughly examines the signature-based Java 2 security model, and includes coverage of ActiveX, Java smart cards, trust-based policy management, plus much more.

See all Product Description

Tag this product

(What's this?)

Think of a tag as a keyword or label you consider is strongly related to this product.
Tags will help all customers organize and find favorite items.

Customer Reviews

7 Reviews

5 star:		(4)
4 star:		(1)
3 star:		(0)
2 star:		(1)
1 star:		(1)

Average Customer Review

3.9 out of 5 stars (7 customer reviews)

Share your thoughts with other customers:

Create your own review

Most helpful customer reviews

4.0 out of 5 stars good information base for beginners/intermediates, Nov 17 2003

By

Sudipto K. Haldar "Sudipto" (Robbinsville, NJ USA) - See all my reviews
(REAL NAME)

This review is from: Securing Java: Getting Down to Business with Mobile Code, 2nd Edition (Paperback)

This book is very informative, describes Java security model and its evolution in detail, in fact, in too much a detail to suit the advanced developers.

It does not cover in detail how to write your own ClassLoader/SecurityManager and other security related components, so I would not recommend it to somebody wanting to rewrite the whole security model for an enterprise grade application, but this book surely covers a wide range of security basics which I find would be useful for anyone interested in security, not only for java developers.

This books gives a detailed listing of kinds of security threats Java has faced since its inception and how they were plugged and while doing that it gives a good perspective how a system can be compromised or prevented from being so.

Help other customers find the most helpful reviews

Was this review helpful to you? Yes No

Report abuse

1.0 out of 5 stars Not what I was hoping, Jan 8 2001

By A Customer

This review is from: Securing Java: Getting Down to Business with Mobile Code, 2nd Edition (Paperback)

This book isn't good as a technical reference!! There's no meat here. But, it's not even very good for non technical people. It doesn't discuss anything that has a practical impact on real people. I could have done with only ten pages or so on mobile code if they could have given me just a hint on what i need to know to write security into my programs. The book also really talked down, explaining things that were obvious for pages and pages and was way too goofy.

Help other customers find the most helpful reviews

Was this review helpful to you? Yes No

Report abuse

5.0 out of 5 stars A well written book., Oct 25 1999

By A Customer

This review is from: Securing Java: Getting Down to Business with Mobile Code, 2nd Edition (Paperback)

It is one of those few books, which captivates the reader to complete the book once he/she begins to read. Most of the contents can be understood by inexperienced Java programmers as well. It gives good leads to references in the area. It can be an eye opener to many people who donot understand the security and its importance.

Help other customers find the most helpful reviews

Was this review helpful to you? Yes No

Report abuse

Share your thoughts with other customers: Create your own review

› See all 7 customer reviews on Amazon.ca

Want to see more reviews on this item?

› Go to Amazon.com to see all 6 reviews 4.3 out of 5 stars

Most recent customer reviews

2.0 out of 5 stars not better than Java online tutorial
I am looking for a java secuity book and find this one is a 5-star. After I bought it, I find it teachs me no more than Java Tutorial Security's trail. Read more

Published on May 13 1999

5.0 out of 5 stars Excellent conceptual overview
IMHO, this book is an excellent conceptual overview which also goes into some practcial areas, such as signing applet with JDK1.1 and 1. Read more

Published on April 29 1999