"J2ee Security for Servlets, Ejbs, and Web Services" - "Pankaj Kumar, " (Pearson)
includes index and biblioraphy