The Java 2 Standard Edition discussion of security can be viewed from http://java.sun.com/j2se/1.5.0/docs/guide/security/index.html.
The Java EE 5 Tutorial chapter titled Security can be viewed from Java EE 5 Tutorial.
The Administration Guide chapter titled Overview of Security Chapter 8, Configuring Security.
The Developer’s Guide chapter, Chapter 5, Securing Applications, in Sun Java System Application Server Platform Edition 9 Developer’s Guide.
The Oasis Web Services Security: SOAP Message Security (WS-Security) specification, can be viewed from http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0.pdf.
The OASIS Web Services Security Username Token Profile 1.0, can be found at http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0.pdf.
The OASIS Web Services Security X.509 Certificate Token Profile 1.0, can be found at http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0.pdf.
The XML-Signature Syntax and Processing document can be viewed at http://www.w3.org/TR/xmldsig-core/.
The XML Encryption Syntax and Processing document can be viewed at http://www.w3.org/TR/xmlenc-core/.