Hi Kailey,
Does Pro Jakarta Tomcat 5 cover security issues?
The book covers security from the admin's perspective. This includes authentication and authorisation, SSL with Apache,
Java's security manager, user management and file system security.
Writing inherently secure web applications is not covered in the book as that is the developer's role and not the admin's.
Matt