This paper investigates implementation of J2EE-based Web system and its security problems, such as identity authentication, security audit, EJB transaction security, EJB method access control and database security.

• 研究了基于J2 EE分布式模型的Web应用系统的实现及该应用系统的安全问题；如身份认证、安全审计、EJB事务安全、EJB方法访问控制、数据库安全等.