Security

Java is designed to allow EndUsers^? to run untrusted code in a SandBox. The SandBox security model is used by Applets and JavaWebStart where classes and JAR s are loaded from the Internet.

• JAAS
• SSL
• InstanceBasedSecurity
• SingleSignOn
• IdentityManagement^?
• RoleBasedAccessControl
• WebApplicationSecurity

J2EE security

• http://www.javaworld.com/javaworld/jw-07-2004/jw-0726-security.html

Open source projects

• http://gabriel.codehaus.org/
• http://opensource.atlassian.com/seraph/
• http://securityfilter.sourceforge.net/
• jGuard
• http://www.josso.org/
• http://acegisecurity.sourceforge.net/

Discussion about Security