ABSTRACT
Data protection is the primary goal of an information security program. The confidentiality, integrity, and availability of data need to be unscathed for an organization to carry out its business smoothly. We will explore the various techniques and practices that may be applied for a Java Web application, to secure the data that are stored, processed, and transmitted by the application. This chapter will focus on the aspects of maintaining confidentiality and integrity of data that are handled by the Java Web application. We will delve into the concepts of cryptography and will also highlight the implementation strategies for the same with the new Java EE.
