SunSite@UTK Java Security	Several links to Java Security sites. Includes bug info. Partly useful.
Wei Wang (et al): Java Security	Not a great paper, but it's out there. Written for a class project.
Java Security	Scott Oak's book Java Security. O'Reilly is known for their developer-oriented books. This book fits the bill, as it provides both an API reference guide and a number of code samples. It is almost up-to-date (JDK1.2beta3) and carefully details JDK 1.2 functionality. One caveat, Oaks is an employee of Sun Microsystems and certainly toes the party line. The discussion of security risks an implications reflects this fact. Also missing is any treatment of Java security holes. If you are a developer who wants to learn about the APIs and you don't care too much about the bigger picture, this book is for you.
Symantec spots first Java virus (CNN) JavaApp.Strange Brew (Symantec)	Rumors of this "virus" were greatly exaggerated by Symantec. Alas.

Note: The opinions expressed on this page are the opinions of Gary McGraw and Ed Felten. Statements made on this page should not be construed as having come from our employers or our publishers. We welcome correspondence, see the Java Security page for e-mail addresses. Copyright © 1996-9, Gary McGraw and Edward Felten