Recently I stumbled upon giac and certifications they offer certifications. However they are really expensive and usually recommend their online/classroom trainings which costs thousands. I also tried to google for any good study material for GSSP-Java in particular, but could not find any good books for self study. Did anybody with relatively less experience in developing highly secured applications like me, but still managed to get a good grasp on the subject by self study ? Are there any recommended study material or approach ?