Re: J2EE Application Security Code Review

[crazy frog crazy frog <i.m.crazy.frog () gmail com>]

hi,
there are various resources availiable on internet.check for proper
authentication,data validation,user rights,database security etc.
bam bam,

--
ting ding ting ding ting ding
ting ding ting ding ding
i m crazy frog :)
"oh yeah oh yeah...
 another wannabe, in hackerland!!!"



On 10/28/05, Yousef Syed <yousef.syed () gmail com> wrote:
> Hi,
> I've been tasked with performing a Code Review on for Security on a
> J2EE Application's code.
> Though I've taken part in numerous Code Reviews, I've never done one
> searching for Security issues.
>
> Can someone please advise me on what I should be looking for?
> Where can I get further information on the procedure that should be followed?
> Are there any Standards/Best Practices for Securing J2EE applications?
>
> Thanx,
> ys
>
> --
> Yousef Syed