Security is never a fun subject to dive into, at least not for me anyway. J2EE Security for Servlets, EJBs, and Web Services, is a book that will help you prepare so that you are not having to spend so much time working damage control because you got sloppy.

(Quote)
Inside the book

“This book is organized into three main parts. Part one is all about basic security and the Java platform. Part two introduces the readers to the basic building blocks of the Java platform’s security architecture - APIs for cryptographic operations, PKI infrastructure, access control mechanisms, Java Secure Socket Extensions, and APIs for XML. And finally, the third and final part links together the concepts introduced in part two.”