Instant Java Password and Authentication Security

Fernando Mayoral

• Publisher: Packt Publishing
• Year: 2013
• eBook ISBN: 9781849697767
• Edition: 1
• Topic: Computer Science
• Subtopic: Cyber Security
• Index: Computer Science

In Detail

Password security is a critical matter when it comes to protecting the interests of application users and their data for a satisfactory user experience. With the advancement in technology, now more than ever, application developers need to be able to implement reliable mechanisms to prevent passwords from being stolen. Java Password and Authentication Security provides a practical approach to implement these reliable mechanisms with the possibility to make password authentication stronger as technology makes it easier to break them.

Java Password and Authentication Security is a practical, hands-on guide covering a number of clear, step-by-step exercises and code examples that will help you to implement strong password authentication solutions for your project in no time.

This book starts off with the most basic and well known hashing technique to quickly get an application developer started with implementing a standard password protection mechanism. Furthermore, it covers the stronger SHA (standard hashing algorithm) family in detail and brings up a technique to improve the hash security with a technique called salting.

You will also learn how to use these hashes, and more importantly, when to use each technique. You will learn that not every hash algorithm is good in every situation, and how to deal with password recovery, password authentication, and timing attacks.

Approach

Filled with practical, step-by-step instructions and clear explanations for the most important and useful tasks. This book takes a hands-on approach to Java-based password hashing and authentication, detailing advanced topics in a recipe format.

Who this book is for

This book is ideal for developers new to user authentication and password security, and who are looking to get a good grounding in how to implement it in a reliable way.

Its assumed that the reader will have some experience in Java already, as well as being familiar with the basic idea behind user authentication.

Instant Java Password and Authentication Security

---

Instant Java Password and Authentication Security

Copyright © 2013 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: November 2013

Production Reference: 1221113

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-84969-776-7

www.packtpub.com

Credits

Author

Fernando Mayoral

Reviewers

Benjamin Bahrenburg

Rahul Bhattacharjee

Acquisition Editor

Edward Gordan

Taron Pereira

Commissioning Editor

Neil Alexander

Technical Editor

Nadeem N. Bagban

Copy Editors

Roshni Banerjee

Dipti Kapadia

Project Coordinator

Ankita Goenka

Proofreader

Lucy Rowland

Production Coordinator

Kyle Albuquerque

Cover Work

Kyle Albuquerque

Cover Image

Sheetal Aute

About the Author

Fernando Mayoral is a young app developer and an advanced student in Systems Engineering, with experience in distributed systems, data mining, high performance algorithms, and web security. He is a web security enthusiast, always trying to learn as much as possible.

Fernando has taken part in very interesting startups, personal projects, and full time jobs. He has worked on big projects for Cardif, a multinational insurance company that is part of the BNP Paribas group, and has collaborated indirectly on projects for Toyota and Pan American Energy.

I would like to thank the entire Packt Publishing team for this opportunity and for their support and patience. It’s amazing to be able to pass on some things I’ve learned over the years.

About the Reviewers

Benjamin Bahrenburg is an author, blogger, and technology director. Ben specializes in building enterprise solutions using Mobile Technologies, Geo Location Services, and Domain Specific Languages. Over the last decade, he has provided enterprise mobility solutions for numerous Fortune 100 organizations. Ben is a published writer, having authored several articles and the Packt book, Appcelerator Titanium Business Application Development Cookbook, which provides the best practices and recipes for successful Enterprise cross-platform mobile development.

Ben spends much of his time blogging and speaking about mobile, enterprise, and open source development at http://bencoding.com. You can also reach him on Twitter at http://twitter.com/bencoding.

Rahul Bhattacharjee has more than nine years of experience in designing and architecting software systems. He is currently working as an engineer with Yahoo! India engineering team (Ad platforms). He is a BE degree holder from the National Institute of Technology, Durgapur and holds numerous technical certifications.

www.PacktPub.com

Support files, eBooks, discount offers and more

You might want to visit www.PacktPub.com for support files and downloads related to your book.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at <[email protected]> for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

http://PacktLib.PacktPub...

Table of contents

• Instant Java Password and Authentication Security