Apache Tomcat Security Handbook [Illustrated] [Paperback]

Vivek Chopra (Author), Ben Galbriaths (Author), Brian Rickabaugh (Author), Gotham Pollysetty (Author), John Turner (Author)

Book Description

Publication Date: February 2003

Tomcat is the official reference implementation for Java servlet and JSP technologies, and has long been heralded as an excellent platform for the development and deployment of powerful web applications. It can either run as a stand-alone server or integrate with the Apache web server to add more power to its serving capability. With more and more Tomcat servers finding their way into production, there is a need for Tomcat servers to run with a secure policy, and in that respect, security is becoming more of an imperative than a policy definition. A definitive security policy is a benchmark for analyzing the amount of trust that you can place on JSP pages, web applications, and the permissions that you can grant them. It is also your best line of defense against the potential vulnerabilities that can be targeted by Trojan Java packages, JSP tag libraries, and web applications.

This book is targeted at Tomcat developers who are either contemplating the use of Tomcat for production-level deployment, or have already embraced this promising option. Readers of this book need a working knowledge of Java web applications and must be competent with JSPs and servlets.

Editorial Reviews

About the Author

John Turner

John is a senior application developer and UNIX systems administrator with Advertising Audit Service, Inc. in Farmington Hills , Michigan. A technology professional for over 10 years, John has experience in the automotive, health care, advertising,and finance industries. His industry interests include vintage technology, open source, mobile computing and wireless networking.

Vivek Chopra

Vivek has extensive experience in software design and development. He has worked on a range of technologies, including compilers, programming tools, middleware and XML/Web Services. He has authored a number of books on Web Service technologies and on Apache Software. He is actively involved with Open Source software, and is a committer for the UDDI4J API. Vivek hold a bachelor's degree in Electronics and master's degree in Computer Science. He lives and works in the San Francisco Bay Area, and can be contacted at [e-mail]

Ben Galbraith

Before graduating from High School, Ben Galbraith was hired by a major Silicon Valley computer manufacturer to develop Windows-based client-server applications with international deployments and hundreds of users. In 1995, Mr. Galbraith began developing for the web and fell in love with Unix, vi, and Perl. After building countless web applications with Perl, Ben discovered server-side Java in 1999 and his relationship with Perl has since become somewhat estranged. Mr. Galbraith is presently a consultant in Provo, Utah. He regularly lectures, evangelizes and gives classes on Java technology. Ben has no college degree but if he had the time he would study both ancient and modern history.

Brian P. Rickabaugh

Brian is a senior systems architect for a large global conglomerate in the financial, manufacturing and media industries. He is also president of StrayCat Incorporated , a small business focused primarily on software consulting services. He has been developing web-centric object-oriented software in C/C++ and Java for six years. He is also a huge proponent of open source software and the positive impact it can have on small, medium, and large organizations. His current focus is on XML and implementing Web Services technologies for internal and external systems integration. When he isn't developing software, he enjoys spending time with his girlfriend Renee and cat Chloe. Brian holds a Bachelor of Science degree in Computer Information Systems from Roanoke College in Salem, Virginia.

Gotham Polisetty

Gotham is the founder and principal architect of Global Software Solutions, Inc. in Charlotte, North Carolina. Gotham currently consults for large fortune 500 companies and helps them architect complex distributed systems and solve problems related to the distribution of data and processing within these systems. Gotham has been involved in the IT industry since 1982 and consults extensively on the design and architectural issues involved in implementing large web based corporate ERP systems. Gotham Polisetty can be reached at [e-mail]

Product Details

• Paperback: 200 pages
• Publisher: Wrox Press (February 2003)
• Language: English
• ISBN-10: 1861008309
• ISBN-13: 978-1861008305
• Product Dimensions: 9 x 6 x 0.6 inches
• Shipping Weight: 11.5 ounces
• Amazon Best Sellers Rank: #591,461 in Books (See Top 100 in Books)