Auditing Borlandës J2EE Application Server: An Auditorís Perspective

This paper documents an independent audit of an in-production business system. The focus of the audit is confined to the system's J2EE AppServer component only. The AppServer in this system is Borland's Enterprise Server, version 5.2. The purpose of this audit is to assess the risk facing the system at this layer (the AppServer layer) and provide the organization's management with a plan to resolve that risk in an effective way. The audit activity was divided into four parts.