MCITP Self Paced Training Kit or Core Security Patterns

MCITP Self-Paced Training Kit (Exam 70-443): Designing a Database Server Infrastructure Using Microsoft SQL Server(TM) 2005

Author: J C Mackin

Announcing an all-new Microsoft Certified IT Professional (MCITP) Training Kit designed to help maximize your performance on Exam 70-443, an exam for the new MCITP: Database Administrator certification. This kit packs the tools and features exam candidates want most-including in-depth, self-paced training based on final exam content; rigorous, objective-by-objective review; exam tips from expert, exam-certified authors; and a robust testing suite. It also provides real-world scenarios, case study examples, and troubleshooting labs for skills and expertise that you can apply to the job.

Focusing on SQL Server 2005, this official study guide covers topics such as designing a database server infrastructure, designing security for a database server solution, designing a physical database, designing a database solution for high availability, specifying data recovery technologies based on business requirements, and designing a strategy for data archiving.

Ace your exam preparation and ramp up quickly on SQL Server 2005 database administration by working at your own pace through the lessons, hands-on exercises, and practice tests. The CD features 425 practice questions and a flexible test engine with pre-assessment and post-assessment capabilities. Choose timed or untimed testing mode, generate random tests, or focus on discrete objectives or chapters, and get detailed explanations for right and wrong answers-including pointers back to the book for further study. You also get a 180-day evaluation version of SQL Server 2005 Enterprise Edition and a 15 percent exam discount voucher-making this kit an exceptional value and a great career investment.

Book review: Économie Directoriale et Stratégie D'affaires

Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management

Author: Christopher Steel

Praise for Core Security Patterns

"Java provides the application developer with essential security mechanisms and support in avoiding critical security bugs common in other languages. A language, however, can only go so far. The developer must understand the security requirements of the application and how to use the features Java provides in order to meet those requirements. Core Security Patterns addresses both aspects of security and will be a guide to developers everywhere in creating more secure applications."

--Whitfield Diffie, inventor of Public-Key Cryptography

"A comprehensive book on Security Patterns, which are critical for secure programming."

--Li Gong, former Chief Java Security Architect, Sun Microsystems, and coauthor of Inside Java 2 Platform Security

"As developers of existing applications, or future innovators that will drive the next generation of highly distributed applications, the patterns and best practices outlined in this book will be an important asset to your development efforts."

--Joe Uniejewski, Chief Technology Officer and Senior Vice President, RSA Security, Inc.

"This book makes an important case for taking a proactive approach to security rather than relying on the reactive security approach common in the software industry."

--Judy Lin, Executive Vice President, VeriSign, Inc.

"Core Security Patterns provides a comprehensive patterns-driven approach and methodology for effectively incorporating security into your applications. I recommend that every application developer keep a copy of this indispensable security reference by theirside."

--Bill Hamilton, author of ADO.NET Cookbook, ADO.NET in a Nutshell, and NUnit Pocket Reference

"As a trusted advisor, this book will serve as a Java developer™s security handbook, providing applied patterns and design strategies for securing Java applications."

--Shaheen Nasirudheen, CISSP,Senior Technology Officer, JPMorgan Chase

"Like Core J2EE Patterns, this book delivers a proactive and patterns-driven approach for designing end-to-end security in your applications. Leveraging the authors™ strong security experience, they created a must-have book for any designer/developer looking to create secure applications."

--John Crupi, Distinguished Engineer, Sun Microsystems, coauthor of Core J2EE Patterns

Core Security Patterns is the hands-on practitioner™s guide to building robust end-to-end security into J2EE™ enterprise applications, Web services, identity management, service provisioning, and personal identification solutions. Written by three leading Java security architects, the patterns-driven approach fully reflects today™s best practices for security in large-scale, industrial-strength applications.

The authors explain the fundamentals of Java application security from the ground up, then introduce a powerful, structured security methodology; a vendor-independent security framework; a detailed assessment checklist; and twenty-three proven security architectural patterns. They walk through several realistic scenarios, covering architecture and implementation and presenting detailed sample code. They demonstrate how to apply cryptographic techniques; obfuscate code; establish secure communication; secure J2ME™ applications; authenticate and authorize users; and fortify Web services, enabling single sign-on, effective identity management, and personal identification using Smart Cards and Biometrics.

Core Security Patterns covers all of the following, and more:

• What works and what doesn™t: J2EE application-security best practices, and common pitfalls to avoid

• Implementing key Java platform security features in real-world applications

• Establishing Web Services security using XML Signature, XML Encryption, WS-Security, XKMS, and WS-I Basic security profile

• Designing identity management and service provisioning systems using SAML, Liberty, XACML, and SPML

• Designing secure personal identification solutions using Smart Cards and Biometrics

• Security design methodology, patterns, best practices, reality checks, defensive strategies, and evaluation checklists

• End-to-end security architecture case study: architecting, designing, and implementing an end-to-end security solution for large-scale applications