this is the document for the secure development in java. It covers in very good details the aspect of security programming in Java