Security / Hacking j2ee apps

Hello,

I need to do a pen-test in a j2ee application and I was wondering if
you know any good book or paper about j2ee and jdbc security.

Thanks.

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------