To Authors: Enterprise Java 2 Security

[Arun Rao]

I just have a couple of questions regarding this book -
1. How does this book compare to Li Dong's book?
2. Are there any specific examples in the book for implementating J2EE security in a corporate environment?
3. Are there any code samples in the book or online?
4. What level of expertise is required to go through the book?
Thank you.
[ April 20, 2004: Message edited by: Arun Rao ]

[Marco Pistoia]

Arun,
Please find my answers below.
1. How does this book compare to Li Dong's book?
ANSWER: Li's book was written several years ago and only covers the architecture of J2SE security. We cover that as well, but we also cover the architecture of J2EE security, cryptography (JCA, JCE, JSSE, and PKCS-S/MIME), scenarios, Web services, etc.
2. Are there any specific examples in the book for implementating J2EE security in a corporate environment?
ANSWER: Yes.
3. Are there any code samples in the book or online?
ANSWER: In the book, yes. Online, no; I don't think the publisher allowed us to post anything on the Internet. Some people who did not read the book carefully complained that we did not put enough examples in the book. The first two parts of the book cover the architecture of J2SE and J2EE, but Parts 3 and 4 are fully of sample code.

4. What level of expertise is required to go through the book?
ANSWER: A basic knowledge of Java is required. No knowledge of security is required. The book explains everything, including the crypto algorithms.
Thank you.
Marco

[Arun Rao]

Thank you for your reply Marco. Is there a CD accompanying the book? It would be really helpful if there nothing online.

[Marco Pistoia]

Hi Arun,
No, the publisher did not ship any CD with this book. We discussed this at the beginning of the project but there were some copyright issues. So far, the code in the book and sample chapters are not available online because the book is new (it was released only a few weeks ago).
Thank you,
Marco

[Nicholas Cheung]

Hi Marco,
However, will the sample chapers as well as the source codes online after some more time later? So that we can still have a look even we need to wait a bit longer.
Nick

[iyven koh]

When is this book available in Asia? Hope we can have a sense of your book with a few sample chapters online too.

[Nicholas Cheung]

The book is available in Hong Kong soon. I have checked one of the local bookstore that the books will be shipped to HK at the beginning of May.
Nick

[Ayesha Bux]

When is this book available in Asia? Hope we can have a sense of your book with a few sample chapters online too.

Very good idea!

[Nicholas Cheung]

There are currently one sample chapter about Web Services Security online. You can find the link from one of my post:
https://coderanch.com/t/133388/Security/WebServices-Security
Nick

[iyven koh]

Thanks Nick for your reply but i am referring to sample chapters of "Enterprise Java 2 Security". Although Macro has mentioned that there's no digital or pdf version available online due to copyright, i guess all the readers would appreciate to have a look of the samples online.

[Marco Pistoia]

Hi everybody. I have asked the publisher when the book will be available in regular bookstores in Asia (in particular, India and Hong Kong) and the answer is:
"Hi Marco,

I know that our international folks are currently pitching
this book to all of our international subsidiaries. Yet, I have
not seen an announcement from them about having the international
licensing for this book nailed down for India and Hong Kong.

Usually, I get an announcement and then I immediately forward
each announcement to the authors. "
I will let you know more details as soon as they forward me the announcement. In the meantime, I think you can order the book from amazon.com or bn.com if you are interested.
===
Nick,
The sample chapter you have posted is not from my book. I did find that Chapter 3 from my book is available for free download at www.addison-wesley.com. Search for "Enterprise Java Security" and on the left hand side there is a link for a sample chapter. Keep in mind though that this is an introductory chapter. More details will be given later in the servlet and EJB security chapters, and in the J2SE, JAAS, JCA/JCE, JSSE, and Web Services security chapters.
Thank you,
Marco Pistoia