Core Security Patterns: Best Practices and Strategies for J2EE(TM), Web Services, and Identity Management (Core Series)

Customer Reviews:

Best Java Security Book for J2EE and Web Services........2007-09-23

This is a great book - by far the best security design book for Java and J2EE (including Java SE 6 and Java EE 5) I have read to date. When I first heard about my coworkers talking about this book, I thought "oh great, another J2EE book!" Much to my surprise, this book is not just a how-to security API or patterns recipe book but much more than that - I see it as a collection of valuable suggestions and examples on how to choose security mechanisms and use them in J2EE applications and web services. Moreover, it tells you what the bestpractices, pitfalls and tradeoffs are for each design pattern option you take. Particularly, You will find this book as an ideal companion for CORE J2EE PATTERNS - Deepak Alur et al, which is my favorite for designing J2EE applications.

This book is as close to size of a pillow and I do understand why the authors gave only code snippets for selected examples instead of full implementation. The case study is just right, it discusses the scenario and how to incorporate the patterns right in to the application design..which is just right for a Java developer who is involved with Java enterprise applications and web services. The best practices and security checklist detailed in this book - helps a lot during development and when you want to deploy a J2EE application/web service in production.

Having said that, I prefer this book as a must-have for any serious Java developer/designer/architect who wants to build Security from understanding basics of WHAT and know WHY you should architect your J2EE system in a particular way using best practices (a long list) and not just HOW. Ultimately you will find this book as an onestop reference for building security in J2EE applications and web services.

Java security made easy. Excellent title worth investing on........2007-09-18

If you ever want to understand about security and its role in the development of J2EE enterprise-level applications, then you should consider buying this book from your local bookstore.

The authors have done an excellent job in explaining the basics of security as it applies to the most common business practices, as well as deliver intricate details on the inner workings of the Java platform security architecture. Even though this book covers in its majority Java technologies, you don't have to be a Java developer or architect to appreciate it.

The book is divided in 7 major parts:

Part 1: Introduction and Basics of Security

Part 2: Java Security Architecture and Technologies

Part 3: Web Services Security and Identity Management

Part 4: Security Design Methodology, Patterns, and Reality Checks

Part 5: Design Strategies and Best Practices

Part 6: Putting it all together

Part 7: Personal Identification using Smart Cards and Biometrics

Parts 1-5 provide reams of detail about the fundamentals of security, the J2EE security architecture, and the technologies used to enable Web services security. In addition, there is a comprehensive explanation of patterns and practices for J2EE developers, as well as design strategies and best practices for securing J2EE Web components and web-based applications.

Web developers might want to pay special attention to Part 3 of the book because it gives an insight on fortifying Web services, authenticating and authorizing end users, and applying the latest cryptographic techniques. XML is described in detail as the encoding for messages between parties using a Web Service.

Note that this book does not explain the specific JAVA APIs needed for basic J2EE application development. Twenty-three proven security architectural patterns are discussed and presented through several realistic scenarios, covering architecture and implementation and presenting detailed sample code.

Part 6 of the book describes how to use this newly acquired knowledge in the implementation of real-world security scenarios.

Finally, we found the last part of this book as the most intriguing. It provides an in-depth coverage on Personal Identification using Smart Cards and Biometrics, their role in physical and logical access control, and the different technologies used in their implementation. Best practices and common pitfalls that might arise when implementing security using smart cards and biometrics are also discussed.

Overall we believe this is excellent book for the security enthusiast who wants to build robust end-to-end security into J2EE enterprise applications.

Excellenet book for Java Security architects.......2007-07-22

Like any Sun core book, this "reference" manual is cut above the rest. Personally I use it more as a reference manual helping me to understand and design security requirements for a project.

The reference book of the java security.......2007-07-19

A fantastic book that each java developer should have. Today, the security is becoming a real requirement of each java based enterprise application, and this book, in my opinion, represents the best reference. It is a very exhaustive and complete book for both beginner and advanced levels.

I don't think this is an awesome book.......2007-05-09

I am amazed by the 5 star ratings everybody has given this book! And I have implemented several enterprise level security implementations/integrations supporting hundres of thousands of users.

In my opinion, this book is really feeding the buzzwords frenzy of security domain. It certainly "talks the talk", but can it "walk the talk"?

I can think of numerous glaring examples where the book falls short. To name a few:
- Smart Cards (lots of power point and management level sales fluff here)
- JAAS (I have seen it being described much better in fewer words)
- SAML (huh?)

I think the book does a below average job of providing practical information. Even the content does not flow very smoothly and coherently.

Executive's Guide to Web Services (SOA, Service-Oriented Architecture)

Average customer rating:

Good, clear read
Executive guide is right.
Make Business Sense of Your Web Initiatives
A must read for anyone venturing into Web Services!
Great job explaining Web Services

Executive's Guide to Web Services (SOA, Service-Oriented Architecture)
Eric A. Marks , and Mark J. Werrell
Manufacturer: Wiley
ProductGroup: Book
Binding: Hardcover

Strategy & Competition | Management & Leadership | Business & Investing | Subjects | Books

Management | Management & Leadership | Business & Investing | Subjects | Books

General | Business & Investing | Subjects | Books

MIS | Industries & Professions | Business & Investing | Subjects | Books

Web Marketing | Business & Culture | Computers & Internet | Subjects | Books

General | Programming | Computers & Internet | Subjects | Books

General | Computers & Internet | Subjects | Books

Web Services | Web Development | Computers & Internet | Subjects | Books

Investing | Business & Investing | Bargain Books | Stores | Books

All Amazon Upgrade | Amazon Upgrade | Stores | Books

Business & Investing | Amazon Upgrade | Stores | Books

Computers & Internet | Amazon Upgrade | Stores | Books

Professional & Technical | Amazon Upgrade | Stores | Books

All Titles | Qualifying Textbooks - Fall 2007 | Stores | Books
Similar Items:

ASIN: 0471266523

Book Description

Discover how Web services can improve cost-savings and make your organization more competitive. You’ll get summaries of developing standards, current vendor positions (Microsoft, Novell, IBM, Oracle, Sun), and industry examples of Web services solutions and benefits.

Order your copy today!

Customer Reviews:

Good, clear read.......2004-04-13

A good primer, clearly defined concepts and a writing style that cuts thru the jargon right to the point. Others have expounded the overall virtues of the book, I'll only echo the earlier review praising Chapter 2's definitions.

If you are an executive, senior manager, or just an IT professional looking for the "no BS" answer, and need a clear, concise overview of this sometimes complicated subject so you can make informed decisions on utilizing (or recommending) web services in your business, this book is for you.

Executive guide is right........2004-03-06

There is not enough detail here to make this book worth the money. Don't waist your time, there are many other books here that will fill in the details, this is not one of them.

Make Business Sense of Your Web Initiatives.......2003-08-11

Web-based initiatives can be as simple or complex as looking at the night sky. The technology choices from programming languages to servers to networks to security can be overwhelming. Add to the mix the types of Internet-based business systems desired and demanded by customers along with the ability to implement them and you can find a state of confusion and uncertainty.

Eric and Mark do a superb job of helping executives understand how to take realistic steps to solve the technology conundrum and how best to approach Web-based initiatives that will bring the greatest value to achieving business goals. Without such a book, this journey can be daunting.

The thought leadership presented in the book takes the reader from the application of innovative uses of current technologies to the leading edge of future applications and architectures; all compartmentalized into four phases of adoption.

A great dissertation that is ahead of the pack in toning down the hype of Web Services while presenting a realistic view of the tremendous value that can be achieved.

A must read for anyone venturing into Web Services!.......2003-05-21

Given the wide spread industry hype surrounding Web Services, and the appearance that every software vendor has their own definition and perspective on what really constitutes a Web Service, what do you get - A whole heap of confusion!!

In tackling this confusion "Executive's Guide to Web Services," does a great job of explaining what Web Services are, and separating the business realities from the overblown hype. As such this book is recommended reading for anyone who is looking for a foundation upon which to really understand this emerging subject space.

In this book Marks and Werrell discuss:

- What differentiates Web Services from previous IT trends
- The concepts and standards that make Web Services possible
- The rational for using Web Services to increase organizational flexibility and agility
- Current and future business scenarios for reducing costs and increasing revenues
- How and where to begin using Web Services (as well as where not!)
- Predominant software vendors in the Web Services space, and their market positions

Overall the book avoids technical discussions, favoring a business centric perspective, from which strategic and tactical business considerations are examined. If you are looking for a guide on how to code your first Web Services program, this is not the book for you, this topics is left to the numerous implementation books already out there.

In this book you will find a solid Web Services foundation that will arm you with a good perspective on what Web Services are, as well as where and when to use them today. You will also gain the knowledge and understanding necessary to discern Web Services reality from hype - do not underestimate how valuable this knowledge is for early forays into implementation of Web Services!

Great job explaining Web Services.......2003-05-06

"Executive's Guide to Web Services" starts out by providing real world examples of how and where Web services are being used today (e.g. Dunn & Bradstreet, Dell etc). These examples are used as a backdrop from which Web services concepts are introduced. Chapter 2, "Standards, Concepts and Terminology" is without doubt the most readable and comprehensive Web services primer that I've yet to find - it's worth buying the book for this chapter alone!

CONTENT:
Using chapter 2 as a foundation, later chapters further explore what Web services are, and what they can (and can't) do for businesses. Key topics covered include:
o Web Service Adoption - Looks at the hype surrounding Web services and outlines what's really achievable today. Also, details what the authors refer to as the "Web services Adoption Lifecycle," which maps the likely adoption and business usage of Web services over the next 3-5 years.
o Where to Begin - A step by step analysis of how, where, and when to use Web services for your business.
o Strategic/Vertical Market Implications - The medium to long terms strategic implications of Web services adoption.
o Architecting for Competitive Advantage - A conceptual discussion of how Web services can be used to create a more agile and flexible infrastructure, which is more adaptive to the fluidity of today's market dynamics.

CONCLUSIONS:
Overall, "Executive's Guide to Web Services" does a great job of explaining what Web services are, where and when to use them, and how they can be used to improve internal and inter-company operating efficiencies. The book covers each topic comprehensively, and does a good job of explaining complex concepts in a plain, easy to understand language.
Whether you are only just beginning to look into Web services, or you want to gain additional insights into how your business should look to use Web services, "Executive's Guide to Web Services" will be a good choice.

Book Description

Adopting Web Services will affect many processes within any organization. To throw light on the most important issues, we have commissioned Experts in the Industry to share their insights. The resultant papers cover a broad spectrum from architecture to business strategies without diverting into deep technological fashions. Each study in the collection will answer specific business challenges thrown up by Web Service architectures. Before changing, commissioning, or evaluating a Web Service initiative, all IT Managers, System Architects, Lead Developers, and Business Visionaries should study and reference this book.

Topics covered in this book include:

- Return on Investment

- EAI, business integration, and ebXML

- Key Web Services architectures

- Comparison of J2EE and .NET platforms

- Security

Customer Reviews:

Way too high level to be useful..........2003-05-04

If you are looking for a high-level book on Web Services, then this book is OK. Otherwise save your money and buy a book that outlines Web Services from the architecture perspective.

Excelente Referencia.......2003-04-02

Este libro es una excelente referencia acerca del tema, ya que da la visisón de negocios de la Arquitectura de los WebServices, la integración de sistemas legados, ERPS, CRM, etc. Es un compilado de varios artículos que reune las mejores prácticas en el diseño, desarrollo e implantación de WebServices, es una buena forma de introducir el tema desde la perspectiva de visión de negocios.

Very high level book - Definitely not an Architecture book.......2003-01-30

(-) Don't set big expectations on this book especially if you are looking for defining a Web services architecture.
(-) Does not address the Webservices implementation complexities especially Transactions, Security, Interoperability etc. (I WAS LOOKING FOR IT)
(+) This book is full of high level content if you want to know the basic story of Web services and where you can apply them.

Great!.......2002-09-22

What a simle, but brilliant book. Well worth the money and i hope to see more.

Not a developers book and hardcore architects may find the business sections at the start too business focused, but as a focus for all on web service, this is the best book i have seen yet.

I'd love to see more of this type of book.

Web Services - The Complete Picture!.......2002-09-09

This book is an excellent compilation of 20 articles from leading experts in both the business strategy and technology infrastructure of deploying Web services. The book's forward includes an overview of Web services, the premise for their adoption, and how they are integral to e-business and the evolution of the Web as a business platform.

Introductory chapters give a clear and concise description of the technologies, without complication or over simplification. Topics following then delve into the history and rapid rise in development of Web services, opportunities for the enterprise, and threats to adoption.

Experts in the field of EAI and B2Bi show with both examples and illustrations how Web services address key strategy and technology issues for e-business development. Technical discussion of the Service Oriented Architecture (SOA) and the foundation technologies of SOAP, UDDI, and WSDL give the reader an excellent introduction to the interlinked components of Web services. Coverage of UDDI was excellent, including a look at UDDI-based electronic marketplaces.

Topics also include integration brokers using Web services in ERP, SCM, and CRM, showing readers the reach of Web services in solving integration and orchestration issues in e-business. Practical deployments in e-logistics and financial services show how Web services are being used today. The book covers ebXML and STP (Straight Through Processing) and how each addresses the foundation and evolution of networked e-business.

The chapter on vendors, including coverage of IBM, Microsoft, Sun Microsystems, Oracle, HP and BEA shows the reader how leading vendors support Web services. Material on security and remote references, addressing both network and distributed object technologies, show the reader the nuances of critical Web service infrastructure. The book finishes with a balanced "compare and contrast" of .NET and J2EE application frameworks, and how each supports Web services.

Book Description

Starting from roots in the text search engine business, XML Global has produced a platform called GoXML Transform that aims to provide a means for storing and manipulating native XML data. Leveraging Java and this text search experience, GoXML provides a combined Native XML data store, search engine, registry, and enterprise-class transformation and mapping system.

Service-Oriented Architecture: SOA Strategy, Methodology, and Technology

Average customer rating:

Service-Oriented Architecture: SOA Strategy, Methodology, and Technology
James P. Lawler , and H. Howell-Barber
Manufacturer: AUERBACH
ProductGroup: Book
Binding: Hardcover

Management | Management & Leadership | Business & Investing | Subjects | Books

General | Programming | Computers & Internet | Subjects | Books

General | Computers & Internet | Subjects | Books

General | Software | Computers & Internet | Subjects | Books

Web Services | Web Development | Computers & Internet | Subjects | Books
ASIN: 1420045008

Book Description

Aggressively being adopted by organizations in all markets, service-oriented architecture (SOA) is a framework enabling business process improvement for gaining competitive advantage. Service-Oriented Architecture (SOA): Strategy, Methodology, and Technology guides you through the challenges of deploying SOA. It demonstrates conclusively that strategy and methodology are the keys to implementing SOA and provides the methodology needed for SOA success. The book examines the role of both non-agile and agile project management techniques for deploying SOA. Its methodology applies frameworks of governance, communications, product realization, project management, architecture, data management, service management, human resource management and post implementation processes. Filled with case studies, the book shows the methodology in action. This reference benefits business managers, business analysts, and technology project managers who are serious about adopting SOA as a long-term strategy. It is also benefits those new to business process management, enterprise architecture, and information systems and need to understand SOA, its business drivers, and its methodology.

Average customer rating:

Give astrology bad name.

No worth

No worth

Basic Principles of Geocosmic Studies for Financial Market Timing
Raymond Merriman
Manufacturer: Seek It Pubns
ProductGroup: Book
Binding: Paperback

General | Business & Investing | Subjects | Books
General | Astrology | New Age | Religion & Spirituality | Subjects | Books
General | Finance | Accounting & Finance | Professional & Technical | Subjects | Books
Similar Items:

Merriman on Market Cycles: The Basics

The Ultimate Book on Stock Market Timing: Cycles and Patterns in the Indexes

The New Solar Return Book of Prediction(revised edition)

ASIN: 0930706226

Customer Reviews:

Give astrology bad name........2007-09-04

This book has 55 pages. The following pages sell author's other books: 7,8,42,43,45,46,47 and the last 2 pages. The text on astrology is so basic that readers can find them in any modern or traditional astrological text books. On page 36, author said," When you see an aspect starting to form, you can then go to the aspectarian to determine exactly when it will unfold." Is this how to time the market with astrology? Is it that simple? Of course not. If you use author's method to time the August 2007 correction, you would fail. Astrology is not that simple. Buying this book will provide more capital for the author to play the market; other than that, it has no positive effect on market traders and learners.

No worth.......2001-08-29

Just a compilation of known - like what zodiac signs, planets and aspects are. If you want to buy - may be buy better blank paper.

No worth.......2001-08-29

Just a compilation of known - like what zodiac signs, planets and aspects are.

Books:

Books Index

Books Home

Recommended Books