Security Faq   

This is work in progress. Right now it's just a list of topics that should be covered eventually. Fell free to add content as you see fit.

---

General remarks

• While any of the following may help solve security-related problems, keep in mind that security is a process, not a single product or technology. A technologically secure computer system does not help if someone can steal its hard drive, it's not backed up properly, or if its password is written on a Post-It note.

• Introduction to various security topics

• An interview with Bruce Schneier gives an introduction of some of the non-technological issues and trade-offs to consider.

• comp.risks is a newsgroup and mailing list where all matters related to computer security are discussed by highly knowledgeable practitioners of the field.

• Overview of Java security

• Java Security Evolution and Concepts series in JavaWorld: Part 1 Part 2 Part 3 Part 4 Part 5

---

Applet security

• HowCanAnAppletReadFilesOnTheLocalFileSystem

---

Security managers and class loaders

• Introduction to SecurityManagers

• Class loaders as a namespace mechanism

• Introduction to ClassLoaders

• Writing a ClassLoader

---

Policies

• Introduction

---

Web applications and HTTP

• Some starting points are in the ServletsFaq