Java security is an overwhelming issue. For a truly secure application, you
need to prevent hackers from entering the system, and you need to ensure that
code safeguards security if a hacker does break in. Moreover, there is no
room for error. If you anticipate and prevent hundreds of security
vulnerabilities but overlook just one, a hacker can still wreak havoc on your
system.
This article introduces some fundamental strategies for writing Java code
that remains secure if a hacker manages to enter the system. Essentially,
writing secure code requires a shift in thinking. Instead of worrying about
whether code works correctly, you need to anticipate all of the ways that it
can be exploited, then ensure that security is maintained in every possible
worst case scenario. This, of course, is a monumental task, and there is no
silver bullet for security. Several strateg... (more)