Security

Secure your Java apps from end to end - Javaworld article by Todd Sundsted that examines the foundation of Java security, including virtual machine and byte code security. <small>(June 15, 2001)</small>
http://www.javaworld.com/javaworld/jw-06-2001/jw-0615-howto.html

Sun Microsystems - JDBC Security Guidelines - Guidelines on developing secure Java application using JDBC
http://java.sun.com/j2se/1.3/docs/guide/jdbc/spec/jdbc-spec.frame5.html

Java Security: Frequently Asked Questions - FAQ on Java security with answers from the Princeton Secure Internet Programming team. By SIP, Princeton.
http://www.cs.princeton.edu/sip/faq/java-faq.php3

O'Reilly - Java And Security - Article that examines various Java security services, including Java Security Manager, Security Provider Architecture, and Authentication components.
http://www.onjava.com/lpt/a/4728

Simplify enterprise Java authentication with single sign-on - Article examining how to implement Java Single Sign-On based architecture and functionality using the GSS-API and Kerberos tickets. <small>(September 9, 2003)</small>
http://www.ibm.com/developerworks/java/library/j-gss-sso/

Build secure network applications with SSL and the JSSE API - Javaworld article by Todd Sundsted that explains how to use JSSE and SSL for securing communication channels between Java applications. <small>(May 11, 2001)</small>
http://www.javaworld.com/javaworld/jw-05-2001/jw-0511-howto_p.html

Java Security Hotlist - List with commentary and searchable index of Java security resources, from the authors of the book "Securing Java". By Gary McGraw and Edward Felten.
http://www.cigital.com/javasecurity/links.html

Sun Microsystems - Tutorials on Security in Java 2 SDK - Tutorials on Java 2 Security features, including access control, digital signatures, and cryptography.
http://java.sun.com/docs/books/tutorial/security/

IBM - Java Security Research - Java Security articles and presentations.
http://domino.research.ibm.com/comm/research_projects.nsf/pages/javasec.index.html

ONJava.com: Discovering a Java Application's Security Requirements - Mark Petrovic shows how to use a development-time SecurityManager that logs applications' calls and builds a suitable Java security policy file. <small>(January 3, 2007)</small>
http://www.onjava.com/pub/a/onjava/2007/01/03/discovering-java-security-requirements.html

Sun Microsystems - Security Programming Quiz - This short quiz tests your knowledge of the Java 2 security features.
http://java.sun.com/developer/Quizzes/SECTrivia/

KeyTool GUI - A utility that is a GUI version of the keytool provided with the Java SDK. [GPL]
http://yellowcat1.free.fr/keytool_iui.html

Sun Microsystems - Java 2 Security Quiz - Java 2 Security Quiz based on the book "Inside Java 2 Platform Security".
http://java.sun.com/developer/Quizzes/security/gong.html

CertGear - Java Security Practice Tests / Quizzes - Java security practice tests and quizzes for Java, EJB, and Web security.
http://www.certgear.com/

Java Security: Web Browsers and Beyond - Paper published in 1998 by Drew Dean, Edward Felten, Dan Wallach, and Dirk Balfanz. [Postscript format].
http://pages.cs.wisc.edu/~lhl/cs740/papers/java-security2.ps

JChains Java Security Policy Generator - Allows security auditors to record and optimize permissions needed by Java applications.
http://www.jchains.org/