Java Security

  1. The Java Sandbox Architecture
    1. Sandbox Fundamentals
      1. Sandbox Concept and Purpose
        1. Trusted vs Untrusted Code
          1. Security Boundaries
          2. Java Virtual Machine Security
            1. JVM as Security Boundary
              1. Memory Protection
                1. Code Execution Isolation
                  1. Runtime Security Checks
                  2. Bytecode Verification
                    1. Bytecode Verifier Purpose
                      1. Verification Process
                        1. Loading Phase Verification
                          1. Linking Phase Verification
                            1. Initialization Phase Verification
                            2. Type Safety Enforcement
                              1. Stack Verification
                                1. Type Consistency Checks
                                  1. Reference Validation
                                  2. Malicious Code Prevention
                                    1. Invalid Bytecode Detection
                                      1. Unauthorized Operation Prevention
                                        1. Stack Overflow Protection
                                      2. Class Loading Security
                                        1. Class Loader Architecture
                                          1. Class Loader Hierarchy
                                            1. Parent Delegation Model
                                              1. Namespace Separation
                                              2. Security Implications
                                                1. Class Spoofing Prevention
                                                  1. Code Source Verification
                                                    1. Package Access Control
                                                    2. Trusted vs Untrusted Sources
                                                      1. Local Code Loading
                                                        1. Remote Code Loading
                                                          1. Codebase Restrictions
                                                          2. Custom Class Loaders
                                                            1. Security Considerations
                                                              1. Implementation Best Practices
                                                                1. Common Vulnerabilities
                                                              2. Security Manager
                                                                1. Security Manager Overview
                                                                  1. Purpose and Function
                                                                    1. Runtime Policy Enforcement
                                                                      1. Resource Access Control
                                                                      2. Permission Checking
                                                                        1. checkPermission Method
                                                                          1. Permission Evaluation Process
                                                                            1. Custom Permission Checks
                                                                            2. Access Control Implementation
                                                                              1. File System Access Control
                                                                                1. Network Access Control
                                                                                  1. System Property Access Control
                                                                                    1. Thread Access Control
                                                                                    2. Modern Status and Alternatives
                                                                                      1. Deprecation in Java 17
                                                                                        1. Migration Strategies
                                                                                          1. Alternative Security Approaches

                                                                                      Previous

                                                                                      1. Introduction to Java Security

                                                                                      Go to top

                                                                                      Next

                                                                                      3. Permissions and Security Policies