Basic HTML version of Foils prepared 20 Sept 97

Foil 34 Java Features -- It's (Hopefully) Secure

From Java Tutorial - Summer 1997 Part 1:Introduction to Java Language CEWES Tutorial, Classes SU/Jackson State -- July 22-25 and Fall 97. by Nancy J. McCracken,Geoffrey C. Fox


1 Java bytecodes are shipped across the network and executed on client machines. Security is therefore a critical issue and strongly enforced in Java.
  • Java contains its own networking classes which are designed to be secure
2 Modifications of the C++ model such as eliminating pointer arithmetic and coercion were dictated mainly by the security requirements.
3 Most viruses are based on acquiring access to private/protected sectors of computer memory which is impossible in Java.
4 Java opcodes are executed at the client side by Java interpreter which operates exclusively on the virtual memory. Hence, unless there are security bugs in the Java interpreter itself, the model is safe and users cannot create security holes by incorrectly or maliciously written applets.
5 The bytecodes sent across network are verified at the client which prevents evil/corrupted classes from causing problems

in Table To:


© on Sun Oct 12 1997