Question

What would be the basic and obvious security considerations and recommendations in a Java EE Web application?

Answer 1

• Use HTTPS
• Use Jasypt to simplify some stuff.
• Limit external access point.
• Make sure you don’t have a single point of failure.
• Make sure communication channels are properly secured when needed.
• Secure access to components by white list (give access instead of removing access).
• Make sure the state is kept on then server side.
• Test test test test test…
• Keep updated on security flaws.
• The rest is all about good design.