Ben Alex

Presentations

Spring Security Fundamentals

This session introduces Spring Security to those not already using it, or those seeking to gain a wider appreciation of what it can do for a typical enterprise application. Attendees will learn how to configure and deploy a basic Spring Security system, as well as gain knowledge on how to extend the system to meet their unique security requirements.

Most enterprise applications are multiuser systems dealing with business-critical corporate data. Such applications generally require a security approach that at least addresses user identification and their permissions.

Spring Security (formerly known as Acegi Security) is the Spring Portfolio's security module, and is widely used in security-critical environments such as banking, finance, defence and government departments. Spring Security delivers value by freeing application developers from the time-consuming and complex work of securing their applications, with out-of-the-box capabilities including authentication, authorization, domain object access control, human user detection, channel switching and so on. As such, Spring Security significantly reduces the cost and risk of securing enterprise applications, while also providing a robust, production-proven solution that is extremely flexible to current and future requirements.

This session is aimed at introducing Spring Security to those not already using it, or those wishing to gain a wider appreciation of what it can do in typical enterprise applications. We'll demonstrate adding Spring Security to an existing web application. This will show you how easy it is to configure and deploy Spring Security.

Attendees already familiar with Spring/Acegi Security are invited to consider attending the "What's New In Spring Security 2" session, which will provide specific in-depth coverage of the new Spring Security 2 features.

Birds of a Feather: Security

Come to this session for a lively discussion on implementing secure systems with Ben Alex and Erwin Vervaet.

What's New In Spring Security 2?

This session will cover the exciting new capabilities of Spring Security 2 M1. We'll cover what each new feature does and how you would configure it. We'll highlight how to upgrade your existing Acegi Security 1.0.x configurations to the new and significantly simplified Spring Security 2 configuration format.

Spring Security has provided comprehensive security infrastructure for Spring-based applications since 2003. Formerly known as Acegi Security, Spring Security 2 Milestone 1 offers considerably simplified configuration, together with a wide range of other new features including Windows NTLM authentication, a user management API, persistence-backed remember-me services, hierarchical roles, Spring LdapTemplate support, considerable ACL enhancements, portlet support, and much more.

This session will cover the new capabilities specific to Spring Security 2 M1, and what we're working towards for the 2.0 final releases (M2 and RC). We'll cover what each new feature does, and how you would configure it with Spring Security. We'll also cover in detail how to upgrade your existing Acegi Security configurations to the new and significantly simplified Spring Security 2 configuration namespace.

This session is aimed at existing Spring/Acegi Security users. Those not already using Spring/Acegi Security are invited to consider attending the "Introduction to Spring Security" session for a broader introduction to the Spring Security feature set and introductory implementation approaches. Those interested in the new prtlet support in Spring Security are encouraged to attend John Lewis' session, "Securing Portlets with Spring Security".