Comment IBM red book (Score 1) 66
This red book has indepth converage of Java 2 security aspects including PKI, SSL and even classloaders. Though it doesn't deal with J2EE security details the foundation is lays is solid.
An adequate bootstrap is a contradiction in terms.
