Hi,
Some of the books for security.
1.
J2ee Security for
Servlets, EJB, Webservices - Mr.Pankaj Kumar
2. Core Security
Patterns -Best practices - Three authors, One of them is Mr. Ramesh Nagappan
3. For Webservices security- Mark O'Neill - Gud book covering all topics in security.
Regards