The book does a good job introducing the fundamental details of Internet based appplication security concepts for B2C and B2B via applications and web services. It also introduces the emerging xml security atandards and little bit of identity management. Beyond that I find it is not much helpful, the book suffers with lack of strategies and implementation details that developers need to build their security mechanisms using Microsoft or J2EE or Open source based platforms. You may find this book useful for concepts but you may need a companion Security reference guide spcific to implementing security with Microsoft .NET or J2EE web services.