Learn to Protect Your Assets and Prevent Attacks!

The use of Web Services for Business-to-Business (B2B) and Business-to-Consumer (B2C) transactions has created risks that expose critical assets to increasingly greater threats. Enterprise Web Services Security provides the information developers, application architects, and security professionals need to build security policies and strategies from the ground up in a Web Services environment. Most security books focus on computer or network security in isolation, relegating the other areas to overview chapters or appendices. A single-system view of security, however, is not adequate to describe a distributed Web Services-based environment as it causes the developer to have to piece together material from several resources in order to create secure Web sites and services. This book takes a holistic approach that mirrors the perspective developers need to take regardless of whether they are planning and implementing the security mechanisms for a Web Service, a Web site, or an enterprise. It details how to secure critical components such as workstations, servers, and networks, the goals behind an enterprise’s security policies, the policies an organization should have in place, and how to communicate those policies using WS-Policy Framework and WS-Security Policy. Various threats and attacks are also covered, as well as the identity management, authentication, authorization, access control, confidentiality, and integrity mechanisms needed to protect messages and transactions. Enterprise Web Services Security is the one book developers need to make all their security mechanisms work successfully to thwart attacks and protect assets.

About the Author

Rickland Hollar (McLean, VA) is a Senior Applications Architect with the Central Intelligence Agency (CIA) and has over 30 years experience in the industry. Prior to joining the CIA, he was president of a Virginia-based software development fi rm. He has written articles for various publications, including Web Services Journal. Rick Murphy (Annandale, VA) is a Senior Principal INFOSEC Scientist at Mitretek Systems, a public interest research and development firm. He has over 25 years of experience in the information security field and is an adjunct professor in the University of Virginia’s Information Security Management program. Recent publications include papers on open systems security, network firewall configuration, and access control systems.

Since its introduction in 2006, Google Docs has changed the way people think about office productivity tools—first word-processing documents and spreadsheets and then slideshow-style presentations (which made their Google Docs debut in 2007). Unlike traditional productivity applications, which you buy, install on your computer, and later upgrade yourself (for an additional fee), Google Docs’ applications are Web-based. That means your documents, spreadsheets, and presentations are stored on the Web, and you can access them from anywhere you have an Internet connection and a Web browser. Imagine the possibilities: No more having to remember to transfer a file from your desktop computer to your laptop before you hit the road. No more wondering whether the version you’re working on is the current version. No more having to back up all your documents—because Google’s got you covered.

And if you sometimes need to work when you’re offline, Google’s got you covered there, too. When you install Google Gears (Chapter 3 tells you how), you can work on your documents and view your spreadsheets even when you’re not connected to the Internet. Using Gears to work offline is optional; you don’t have to install it to use Google Docs.

But one of the greatest advantages of Google Docs is the ability to share your documents with others—and collaborate on them in real time. If you’ve ever collaborated by emailing a flurry of files or waiting for someone else to check a document back into a central repository (so you can have your turn), you’ll love collaborating in Google Docs. When you share a document with some collaborators, those people can sign in and work on the document whenever they want, from wherever they are. Multiple collaborators can work on a document at the same time. All edits happen to the current version of the document, so you never have to worry about working on an out-of-date file. (If someone makes edits you need to undo, you can roll back to a previous version using Google Docs’ revision history feature.)

The sequel to the popular lecture book entitled Biomedical Image Analysis: Tracking, this book on Biomedical Image Analysis: Segmentation tackles the challenging task of segmenting biological and medical images. The problem of partitioning multidimensional biomedical data into meaningful regions is perhaps the main roadblock in the automation of biomedical image analysis. Whether the modality of choice is MRI, PET, ultrasound, SPECT, CT, or one of a myriad of microscopy platforms, image segmentation is a vital step in analyzing the constituent biological or medical targets. This book provides a state-of-the-art, comprehensive look at biomedical image segmentation that is accessible to well-equipped undergraduates, graduate students, and research professionals in the biology, biomedical, medical, and engineering fields. Active model methods that have emerged in the last few years are a focus of the book, including parametric active contour and active surface models, active shape models, and geometric active contours that adapt to the image topology. Additionally, Biomedical Image Analysis: Segmentation details attractive new methods that use graph theory in segmentation of biomedical imagery. Finally, the use of exciting new scale space tools in biomedical image analysis is reported. Table of Contents: Introduction / Parametric Active Contours / Active Contours in a Bayesian Framework / Geometric Active Contours / Segmentation with Graph Algorithms / Scale-Space Image Filtering for Segmentation

ASP.NET 2.0 is the new version of Microsoft's groundbreaking server-side scripting language. There is currently a huge demand to integrate dynamic content into Flash websites and applications and, as a solid competitor to technologies such as JSP, PHP, and ColdFusion, ASP.NET is one of the most popular choices to achieve this.

Used in conjunction with Flash, ASP.NET can process, store, and create new data, and work as a bridge between the Flash movie and external data sources, enabling web designers to build dynamic, interactive web applications, incorporating information from a host of databases.

Whether you're a Flash designer or an ASP.NET developer, this highly readable Foundation book will provide a a thorough grounding to integrating Flash , ActionScript 2.0, ASP.NET, and databases. Along the way you’ll study features such as email integration, saving visitor information, dynamic updating, and much more. Foundation ASP.NET 2.0 for Flash will take you through the essentials of ASP.NET/C#, setting up your development environment, sending data to and from Flash, database integration, and then on to advanced topics such as web services, Flash Remoting, XML data, and securing your applications.

About the Author

After leading an Artificial Intelligence team at the University of Minnesota and graduating with a degree in Electrical Engineering and Computer Science, Ryan started Green Lizard Computing in Minneapolis, MN in 1999 where he developed web applications using a combination of ASP, PHP and Flash. In 2001, Ryan co-founded Balance Studios in Green Bay, WI where he is currently the Technical Director. At Balance Studios, Ryan architects and develops web based applications using technologies ranging from Shockwave 3D to ASP.NET and Flash.

In 2003, Ryan also co-founded epicsoft, LLC of Green Bay, WI where he is the lead Software Engineer, designing and developing applications for the creative and development communities using C# and Flash. Ryan is also a Certified Macromedia Flash Developer, teaches classes on Internet technologies at ITT Technical College, speaks at technology conferences, and authors articles for a variety of technology magazines. Ryan maintains an ASP.NET &emdash; Flash weblog which can be found at http://blogs.ittoolbox.com/c/engineering/

This book is designed for a first course in microprocessors or it may be used as a reference for practicing engineers. The book is unique in presenting a balanced, integrated topic coverage of assembly language programming, microcontroller programming via the C language, and hardware interfacing. Programming topics are discussed using both assembly language and C, while hardware interfacing examples use C to keep code complexity low and improve clarity. A goal of this book is to prepare students for advanced courses in embedded systems or computer architecture. As such, the topic coverage is wide, with a mixture of software and hardware topics. The assembly language programming topics emphasize the linkage between C language constructs and their assembly language equivalents, so that students clearly understand the impact of C coding choices in terms of execution time and memory requirements. Hardware interface topics included in the textbook cover the fundamentals (parallel, serial, interrupts, A/D, D/A) using devices that do not require an extensive circuits background. Laboratory Projects These provide an extensive off-the-shelf lab experience (13 experiments) for using the PIC18: one experiment on introductory computer architecture topics, four experiments on PIC18 assembly language, and eight hardware experiments. The hardware experiments require the read to breadboard a PIC18F242 system that includes a serial EEPROM, external 8-bit Digital-to-Analog converter, and RS232 interface, and an infrared receiver module. The hardware labs cover all major subsystems on the PIC18: A/D, timers, asynchronous serial interface, and the 12C interface. All hardware labs are programmed in C, using the HI-TECH PICC18 compiler. A supplemental website (www.reesemicro.com) has book C code examples that have been modified to be compatible with both the Microchip MCC18 and HI-TECH PICC18 compilers, as well as lecture notes and sample quizzes.

About the Author

Robert B. Reese is an associate professor in the Electrical and Computer Engineering department of Mississippi State University. He holds a Ph.D. from Texas A&M University and has been teaching digital systems, microprocessors, and CVLSI design for almost two decades. His research interests focus on computer-aided design for asynchronous systems.

JBoss RichFaces is a rich JSF component library that helps developers quickly develop next–generation web applications. Practical RichFaces describes how to best take advantage of RichFaces, the integration of the Ajax4jsf and RichFaces libraries, to create a flexible and powerful programs. Assuming some JSF background, it shows you how you can radically reduce programming time and effort to create rich AJAX based applications. What you’ll learn

• Quickly learn how to build Rich Internet Applications with out–of–the–box RichFaces components.
• Discover best strategies for implementing Ajax applications using RichFaces.
• Find out when best to use the two libraries.
• Create new skins for your app in no time.
• Create applications without needing to write any JavaScript code.

Who is this book for

Java developers with good JSF knowledge looking to build next–generation web applications using RichFaces, JSF users, Java programmers wishing to add Ajax to their existing programs, and old users of Ajax4jsf

About the Apress Practical Series

The Practical series from Apress is your best choice for getting the job done, period. From professional to expert, this series lets you apply project–motivated templates (or frameworks) step by step in a very direct, practical, and efficient manner toward current real–world projects that may be sitting on your desk. So whatever your career goal, Apress can be your trusted guide to take you where you want to go on your IT career empowerment path.

About the Author

Max Katz is a Senior Systems Engineer at Exadel. He has been helping customers jump-start their RIA development as well as providing mentoring, consulting, and training. Max is a recognized subject matter expert in the JSF developer community. He has provided JSF/RichFaces training for the past three years, presented at many conferences, and written several published articles on JSF-related topics. Max also leads Exadel's RIA strategy and writes about RIA technologies in his blog, http://mkblog.exadel.com. He is an author of "Practical RichFaces" book (Apress). Max holds a BS in computer science from the University of California, Davis.

This book is designed to cover all the objectives that Microsoft created for this exam, thereby helping you meet your certification goals by preparing you for Exam 70-294. It doesn’t offer end-to-end coverage of Active Directory in Windows Server 2003; rather, it helps you develop the specific core competencies that Microsoft says that administrators who support Active Directory in Windows Server 2003 will need to master. In a Windows Server 2003 network, the ability to install, support, and troubleshoot Active Directory is critical to the success of an administrator. As in Windows 2000, Active Directory is intimately integrated into Windows Server 2003, and you cannot have a domain structure without Active Directory. The exam touches on all the major components of Active Directory that are critical to a successful domain and forest implementation. Although volumes of information are available on the history, theory, and underlying applications, this book does not cover these portions of the services in detail. The purpose of this book is to provide an introduction to these services in general, provide an in-depth look at the Windows Server 2003 implementations of Active Directory, and prepare you to take the exam. One additional area that is new to this exam is the emphasis on security. In keeping with the Microsoft Trustworthy Computing initiatives, Microsoft is putting much greater emphasis than in the past on the security facets of all of its Windows Server 2003 exams.

Discover how Microsoft implements and manages the software-testing process company-wide with guidance and insights direct from its test managers. Organizing any testing program the people, processes, and tools can be challenging and resource intensive. Even when the necessary tradeoffs are made, no development team can test every scenario. This book explains how a worldwide leader in software, services, and solutions staffed with 8,000 testers implements and manages its testing process effectively company-wide. Whether you re a tester or test manager, you ll gain expert insights on effective testing techniques and methodologies including pros and cons of various approaches. For interesting context, the book also shares such facts as the number of test machines at Microsoft, how the company uses automated test cases, and bug statistics. It answers key testing questions, such as who tests what, when, and with what tools. And it describes how test teams are organized, when and how testing gets automated, testing tools, and feedback with illuminating insights for software-development organizations of all kinds.

SQL is a standard interactive and programming language for querying and modifying data and managing databases. This task-based tutorial and reference guide takes the mystery out learning and applying SQL. After going over the relational database model and SQL syntax in the first few chapters, veteran author Chris Fehily immediately launches into the tasks that will get readers comfortable with SQL. In addition to covering all the SQL basics, this thoroughly updated reference contains a wealth of in-depth SQL knowledge and serves as an excellent reference for more experienced users.

Database management. It may sound daunting, but it doesn't have to be, even if you've never programmed before. SQL: Visual QuickStart Guide isn't an exhaustive guide to SQL written for aspiring programming experts. It's simply an invaluable resource for those who want a fast, easy way to harness information living in complex databases.

Because author Chris Fehily assumes no prior programming experience on your part (just a familiarity with your OS's file system), he spends the first few chapters laying out the basics, including clear explanations of the relational database model and SQL syntax. Then he jumps into step-by-step tasks designed to get you comfortable using SQL right away. You'll learn how to use SQL's most popular statements and commands to maintain, retrieve, and analyze database information, and to create and edit database objects. Each visually oriented task features the actual code and plenty of screenshots to keep you on track. Fehily takes a software-independent approach to teaching SQL, but includes tips for specific database software. You may not be a programming expert, but with SQL: VQS, who will be able to tell?

About the Author

Chris Fehily is a writer and consultant living in San Francisco.