current state of the art in Java security

[TVN]

To: comp.lang.java.security
Hi, I am interested in researching on Java Security (especially ones
deal with Java Policy & Security Manager) and looking for resources
(website, papers, etc) that keep me in the current state of the art of
java security. For instance who are the popular players and what do
you consider as the current "hot" topics/issues with the Java security
world ? Thanks !!!

---
* Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[war...@gmail.com]

On Jun 4, 1:02 pm, TVN <nguyenthanh...@gmail.com> wrote:
> Hi, I am interested in researching on Java Security (especially ones
> deal with Java Policy & Security Manager) and looking for resources
> (website, papers, etc) that keep me in the current state of the art of
> java security. For instance who are the popular players and what do
> you consider as the current "hot" topics/issues with the Java security
> world ? Thanks !!!

I recently finished a thesis focused on collecting and organizing
rules for writing secure code in Java. You may find my bibliography
useful in finding books/papers on Java security. You may even consider
reading Chapter 3 of my thesis.

You can find the biblio here (at the bottom of the page):

http://peregrin.jmu.edu/~warems/securejavacode.html

I would start with: [17, 19, 20, 27, 23, 2]

The book by Gong et al. [17] is the best book I've seen on the Java
security architecture. It's very much a technical read.

McGraw and Felton (and the rest of the Princeton gang) [23] were big
players in the early years. Definitely get and read their book to get
caught up.

Hope that helps.

[TVN]

To: comp.lang.java.security

Thanks ! these are excellent resources. Do you also know of any
conference/workshop dedicated to java security ?

[war...@gmail.com.remove-dii-this]

To: comp.lang.java.security

On Jun 5, 11:29=A0am, TVN <nguyenthanh...@gmail.com> wrote:
> On Jun 5, 6:37=A0am, "war...@gmail.com" <war...@gmail.com> wrote:
>
>
>
>
>
> > On Jun 4, 1:02 pm, TVN <nguyenthanh...@gmail.com> wrote:
>
> > > Hi, I am interested in researching on Java Security (especially ones
> > > deal with Java Policy & Security Manager) and looking for resources

> > > (website, papers, etc) that keep me in the current state of the art of=

> > > java security. For instance who are the popular players and what do

> > > you consider as the current "hot" topics/issues with the Java security=

> > > world ? Thanks !!!
>
> > I recently finished a thesis focused on collecting and organizing
> > rules for writing secure code in Java. You may find my bibliography
> > useful in finding books/papers on Java security. You may even consider
> > reading Chapter 3 of my thesis.
>
> > You can find the biblio here (at the bottom of the page):
>
> >http://peregrin.jmu.edu/~warems/securejavacode.html
>
> > I would start with: [17, 19, 20, 27, 23, 2]
>
> > The book by Gong et al. [17] is the best book I've seen on the Java
> > security architecture. It's very much a technical read.
>
> > McGraw and Felton (and the rest of the Princeton gang) [23] were big
> > players in the early years. Definitely get and read their book to get
> > caught up.
>
> > Hope that helps.
>

> Thanks ! =A0these are excellent resources. =A0Do you also know of any
> conference/workshop dedicated to java security ?- Hide quoted text -
>
> - Show quoted text -

The only one that I'm aware of is Sun's JavaOne conference (held every
year): http://java.sun.com/javaone/sf/index.jsp

You should be able to search their archives. I believe most
presentations from previous years are available online.