Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
The older articles predating the use of WordPress are slowly being copied over to the WordPress format. This provides a common look & feel and allows WordPress seach functionality, RSS feeds, and other goodies to work properly with the older content.
Read article: Site Maintenance — Clean UpI always forget the quantity prefixes above “tera”. Even more interestingly, one rarely thinks about the numbers’ names. For example, consider the number
Read article: Computer Measurement Prefixes and Number Naming ConventionsThis article expands on the previous Virtual Memory post by exploring Resident Set Size growth while running a Java program that will consume all available Java Heap memory. Four different JVM implementations are used to compare results of these experiments. These JVMs come from two different…
Read article: JVM process Virtual Memory Usage (Resident Set Size) On A Linux 2.6.25 KernelGoogle has released a Browser Security Handbook online. It can be found here.
Read article: Google Browser Security HandbookIt has been a couple of weeks since the last article was published. Recently, I had to dig into Virtual Memory on AIX to work through some issues. I realized there were several details I needed to explore further to understand Virtual Memory implementations. In particular, the implementation…
Read article: Virtual Memory — LinuxIn the last article, JAAS was introduced. An authenticated calling-entity (perhaps a user), has a JAAS Subject. This JAAS Subject contains some combination of Principals, Public Credentials, and Private Credentials. It can be very helpful to dump the contents of this JAAS Subject for debugging…
Read article: Dumping the contents of a JAAS SubjectThis article introduces JAAS authentication via a relatively simple example. The example presented here is based upon the Sun tutorial of the same subject. The thinkmiddleware.com example extends the tutorial to use LDAP to authenticate users.
Read article: JAAS Authentication — An IntroductionThe recent JNDI article and an upcoming JAAS article require an LDAP server. This tutorial will walk through the basic details of reproducing the Openldap Server used in these two articles.
Read article: An Openldap Directory ServerWhile researching an upcoming JAAS article, the decision was made to use JNDI to interact with the Openldap server that was stored user information. JNDI is used extensively in the J2EE landscape; so, exploring JNDI separately from JAAS seemed in order.
Read article: JNDI — Java Naming & Directory InterfaceI’ve mentioned that for larger projects/examples on thinkmiddleware.com, Ant would be used. The Java Security Manager article was the first time it was used. Although, the full details of the source code were not included, Ant was used.
Read article: Ant — Build ControlLooking for something specific? Browse all 124 topics.
