Val:
In almost all of the modern (that is, less than 9 months old) books that I have on JSP/Servlets (that does not exclude the slightly older ones), the issue of
security is discussed. I personally have not had to delve into the topic, but my recommendation is that you get one of those first. If you already have, good start...