Questions on JEE Security

[Souvik Dasgupta]

Hi,

Can anyone, who have recently cleared the exam, tell what kind of questions were asked from JEE Security topics?

[K. Tsang]

I recently passed v5 exam, but I reckon the v6 exam should cover similar material.

For security you ought to know the following:
symmetric and asymmetric encryption algorithms (eg MD5, 3DES, Blowfish)
characteristics of and when to use JAAS
typical attacks (eg man in the middel, denial of service, sql injection, buffer overflow)
what applets can and cannot do in terms of security (eg can it access server resources)

[Manognya vss]

Hello,

I have one question to ask here.

What is the best book to be referred to for part 1 for security ?

I am currently referring to Core Security Patterns and Java EE6 spec. Will that be sufficient ?

Please suggest.