Expert Oracle and Java Security: Programming Secure Oracle Database Applications With Java

Expert Oracle and Java Security: Programming Secure Oracle Database Applications With Java

by David Coffin
     
 

View All Available Formats & Editions

Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java provides resources that every Java and Oracle database application programmer needs to ensure that they have guarded the security of the data and identities entrusted to them. You will learn to consider potential vulnerabilities, and to apply best practices in

Overview

Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java provides resources that every Java and Oracle database application programmer needs to ensure that they have guarded the security of the data and identities entrusted to them. You will learn to consider potential vulnerabilities, and to apply best practices in secure Java and PL/SQL coding.Author David Coffin shows how to develop code to encrypt data in transit and at rest; to accomplish single sign-on with Oracle proxy connections; to generate and distribute two-factor authentication tokens from the Oracle server using pagers, cell phones (SMS), and e-mail; and to securely store and distribute Oracle application passwords.

Early chapters lay the foundation for effective security in an Oracle/Java environment. Each of the later chapters brings example code to a point where it may be applied as-is to address application security issues. Templates for applications are also provided to help you bring colleagues up tothe same secure application standard. If you are less familiar either Java or Oracle PL/SQL, you will not be left behind; all the concepts in this book are introduced as to a novice and addressed as to an expert.

  • Helps you protect against data loss, identity theft, SQL injection, and address spoofing
  • Provides techniques for encryption on network and disk, code obfuscation and wrap, database hardening, single sign-on and two-factor
  • Provides what database administrators need to know about secure password distribution, Java secure programming, Java stored procedures, secure application roles in Oracle, logon triggers, database design, various connection pooling schemes, and much more

What you’ll learn

  • How to guard against data loss, identity theft, SQL Injection, and to address spoofing
  • How to protect sensitive data through encryption, both on disk and on the wire
  • How to control access to data using secure roles, single sign-on, proxy connections, and two-factor authentication
  • How to protect sensitive source ode through randomization, obfuscation, and wrapping
  • How to thwart attempts at SQL injection and other common attacks
  • How to manage constraints on the visibility of data and the scope of access
Who this book is for

Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Javais for every Java developer who uses an Oracle database.It is also for every Oracle database administrator or PL/SQL programmer who supports Java client and web applications.Whatever role you play in developing and supporting Java and Oracle applications, you need to address computer, application, data, and identity security.This book offers the tools you need to be effective in managing security across all aspects of the applications you support.

Product Details

ISBN-13:
9781430238317
Publisher:
Apress
Publication date:
09/13/2011
Edition description:
2011
Pages:
472
Product dimensions:
7.40(w) x 9.20(h) x 1.00(d)

Meet the Author

David Coffin is an IT analyst working at the Savannah River Site, a large Department of Energy facility. Formore than30 years his expertise has been in multi-platform network integration and systems programming.Before coming to the Savannah River Site, he worked for several defense contractors and served as the technical lead for office and network computing at the National Aerospace Plane Joint Program Office at Wright-Patterson Air Force Base in Ohio. As a perpetual student, he has one master’s degree and hasbegun several others. As a family man, he has raisedeight children.Coffin is a triathlete who competes in the middle of the pack. He is also a classical guitar player, but he’s not quitting his day job.

Customer Reviews

Average Review:

Write a Review

and post it to your social network

     

Most Helpful Customer Reviews

See all customer reviews >