Contents

Title and Copyright Information

Preface

• Documentation Accessibility
• Conventions

1 Introduction and Roadmap

• Document Scope and Audience
• Guide to This Document
• Related Information
• Security Samples and Tutorials
  • Avitek Medical Records Application (MedRec) and Tutorials
  • Security Examples in the WebLogic Server Distribution
  • Additional Security Examples Available for Download
• New and Changed Features in This Release

2 Determining Your Security Needs

• Understand Your Environment
• Hire Security Consultants or Use Diagnostic Software
• Read Security Publications
• Install WebLogic Server in a Secure Manner

3 Ensuring the Security of Your Production Environment

• An Important Note Regarding Null Cipher Use in SSL
  • New Control to Prevent Null Cipher Use
• Securing the WebLogic Server Host
• Securing Network Connections
• Securing Your Database
• Securing the WebLogic Security Service
• Securing Applications