Security

CertGear - Java Security Practice Tests / Quizzes - Java security practice tests and quizzes for Java, EJB, and Web security.
www.certgear.com/

DevResearch - Secure Java Programming Guidelines - Guidelines and rules for writing security-critical Java code and applications.
www.devresearch.com/

IBM - Java Security Research - Java Security articles and presentations.
domino.research.ibm.com/comm/research_projects.nsf/pages/javasec.index.html

Java Security: Frequently Asked Questions - FAQ on Java security with answers from the Princeton Secure Internet Programming team. By SIP, Princeton.
www.cs.princeton.edu/sip/faq/java-faq.php3

Java Security Hotlist - List with commentary and searchable index of Java security resources, from the authors of the book "Securing Java". By Gary McGraw and Edward Felten.
www.cigital.com/javasecurity/links.html

Java Security: Web Browsers and Beyond - Paper published in 1998 by Drew Dean, Edward Felten, Dan Wallach, and Dirk Balfanz. [Postscript format].
www.cs.wisc.edu/~lhl/cs740/papers/java-security2.ps

JChains Java Security Policy Generator - Allows security auditors to record and optimize permissions needed by Java applications.
www.jchains.org/

KeyTool GUI - A utility that is a GUI version of the keytool provided with the Java SDK. [GPL]
yellowcat1.free.fr/keytool_iui.html

O'Reilly - Java And Security - Article that examines various Java security services, including Java Security Manager, Security Provider Architecture, and Authentication components.
www.onjava.com/lpt/a/4728

Sun Microsystems - Java 2 Security Quiz - Java 2 Security Quiz based on the book "Inside Java 2 Platform Security".
java.sun.com/developer/Quizzes/security/gong.html

Sun Microsystems - JDBC Security Guidelines - Guidelines on developing secure Java application using JDBC
java.sun.com/j2se/1.3/docs/guide/jdbc/spec/jdbc-spec.frame5.html

Sun Microsystems - Security Programming Quiz - This short quiz tests your knowledge of the Java 2 security features.
java.sun.com/developer/Quizzes/SECTrivia/

Sun Microsystems - Tutorials on Security in Java 2 SDK - Tutorials on Java 2 Security features, including access control, digital signatures, and cryptography.
java.sun.com/docs/books/tutorial/security/

TenorLogic - Java Security Articles - Articles on Java security architecture and security pitfalls
www.tenorlogic.com

ONJava.com: Discovering a Java Application's Security Requirements - Mark Petrovic shows how to use a development-time SecurityManager that logs applications' calls and builds a suitable Java security policy file. <small>(January 3, 2007)</small>
www.onjava.com/pub/a/onjava/2007/01/03/discovering-java-security-requirements.html

Simplify enterprise Java authentication with single sign-on - Article examining how to implement Java Single Sign-On based architecture and functionality using the GSS-API and Kerberos tickets. <small>(September 9, 2003)</small>
www.ibm.com/developerworks/java/library/j-gss-sso/

Secure your Java apps from end to end - Javaworld article by Todd Sundsted that examines the foundation of Java security, including virtual machine and byte code security. <small>(June 15, 2001)</small>
www.javaworld.com/javaworld/jw-06-2001/jw-0615-howto.html

Build secure network applications with SSL and the JSSE API - Javaworld article by Todd Sundsted that explains how to use JSSE and SSL for securing communication channels between Java applications. <small>(May 11, 2001)</small>
www.javaworld.com/javaworld/jw-05-2001/jw-0511-howto_p.html