Co-author Of Apache Tomcat Book Recommends Excelsior JET For Protection Of Java Web Applications

Excelsior's solution employs native compilation to prevent reverse engineering and improve security of Web applications code.

  • Share ThisShareThis Email Contact Email PDF Version PDF Printer Friendly Version Print

Quote startSecond, I wanted better performance than Sun's runtime could offer, especially for Tomcat webappsQuote end

Santa Clara, CA (PRWEB) March 30, 2010

Jason Brittain, co-author of the best-selling "Tomcat: The Definitive Guide" has recommended Excelsior's solution for increasing the security of Java Web applications. The latest Excelsior JET 7.0, a compliant Java SE 6 VM with an ahead-of-time compiler and deployment toolkit, enables protection of the popular Web container, application code and JSPs against reverse engineering and tampering.

A section on Excelsior JET first appeared in the second edition of Brittain's book, dated 2007. "First, I didn't like it when Java opponents kept saying 'Java's just an interpreted language'", says Brittain. "Second, I wanted better performance than Sun's runtime could offer, especially for Tomcat webapps". However, then current version of Excelsior JET did not make the decompilation of Web applications any harder.

"Most Java developers know that Java class files are easily decompiled back into Java source code again," explains Brittain. "What's more, there are now several software tools that can decompile class files into source code that you can easily modify and recompile. Many servlet web applications already contain JSPs, whose source code is readable by simply unzipping the web application. The code for compiled servlet class files and any other included proprietary libraries are also as readable as open source software, once they are decompiled."

The recently released Excelsior JET 7.0 adds support for ahead-of-time native compilation of Apache Tomcat, enabling developers to transform their Java Web applications into highly optimized executables: no Java bytecode is shipped to end users or installed on production servers. As a result, reverse engineering, discovery of security vulnerabilities, and tampering with application code become much more time-consuming and expensive.

Brittain continued: "When compiled into native code with Excelsior JET, none of these class decompilation tools work, and the Java program still runs the same. I tried JET 7 with Tomcat 6 and some of my own large and complex web applications, and it worked flawlessly! I was able to natively compile my Tomcat and my webapps into native code that installed and ran just fine. I was also pleasantly surprised at how easy it was to compile it all on the first try. From my tests, JET works great."

"If you do not want others reading, modifying, and recompiling your web application's source code, Excelsior JET is the best tool to use," concluded Brittain.

See how easy it is to natively compile a Tomcat Web application with Excelsior JET.

About The Book

Now in its second edition, "Tomcat: The Definitive Guide" is a valuable reference for administrators and webmasters, a useful guide for programmers who want to use Tomcat as their web application server during development or in production, and an excellent introduction for anyone interested in Tomcat. Updated for the latest version of Tomcat, this new edition offers a complete guide to installing, configuring, maintaining and securing this servlet container.

About Excelsior JET

Excelsior JET is a certified Java SE technology implementation designed to help developers accelerate their Java applications, fully secure them against decompilers, and eliminate run time dependency on the JRE.

Excelsior JET 7.0 supports Java SE 6 and J2SE 5.0 on Microsoft Windows and Linux operating systems running on 32-bit Intel x86 and compatible hardware. The optimized applications also work in 32-bit compatibility mode on 64-bit x86 systems.

Apache Tomcat support is exclusive to the Enterprise Edition of Excelsior JET. No runtime fee applies to the deployment of optimized applications to conventional desktop PCs and servers.

Full pricing and licensing information is available online at http://www.excelsior-usa.com/jetpricing.html About Excelsior

Excelsior LLC provides advanced Java-compatible solutions and software development services with particular focus on optimizing compilers, high performance runtime environments and the Java technology. Excelsior is a Java Authorized Licensee and a Solution Member of the Eclipse Foundation. The flagship product of the company, Excelsior JET, is a complete solution for the acceleration, protection, and deployment of Java applications. Founded in 1999, Excelsior has its headquarters in Novosibirsk Scientific Center, Russia. To learn more about Excelsior, visit www.excelsior-usa.com.

###