Securing JBoss

Premise

When you first download JBoss, it comes as an easy to install zip file.  Upon installation, you can easily deploy EJBs, web applications and a whole array of services.  However, you may be suprised how easy it is.  JBossSX can fix that by securing those functions.

These are the steps required to secure the default download of JBoss:

• SecureTheJmxConsole

• SecureAWebApplicationInJBoss

• RemoveTheInvokers or SecureTheInvokers

• Remove or restrict RMI ClassLoading service

• Secure JBossMQ

• RemoveHSQLDB

• UsingJBossBehindAFirewall

• SetUpTomcatToUseJBossSecurity

• SetUpAKeystore

• LimitAccessToCertainClients

• How to Run jboss with a Java Security Manager

Related

http://sourceforge.net/docman/display_doc.php?docid=20143&group_id=22866