Web Application Security

Thread view:

Ricky - 25 Aug 2003 12:16 GMT

Hello,

Can I find any Best Practices considering how to secure your
Web Application (jsp, servlet/filter)?

I mean both progmatically ant those which can be defined e.g. to web.xml etc.

Can anyone point me any URLs?

Thanks,

Reply to this Message

Wolfram Rittmeyer - 27 Aug 2003 08:39 GMT

> Hello,
>
[quoted text clipped - 6 lines]
>
> Thanks,

You could start with the J2EE-tutorial by sun (and the security-related
parts of it)
http://java.sun.com/j2ee/tutorial/1_3-fcs/doc/Security.html

and with the SUN blueprints:
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/s
ecurity/security.html

They provide a very good overview. For using db-based authorization you
also have to look at your containers documentation since mapping
db-users to web.xml roles is container-specific.

Wolfram Rittmeyer
http://www.jsptutorial.org

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...