We review the existing literature on Java safety, emphasizing formal approaches, and the
impact of Java safety on small footprint devices such as smartcards. The conclusion is that …

One of Java's most striking claims is that it provides a secure programming environment. Yet
despite endless discussion, few people understand precisely what Java's claims mean and …

This report describes security properties to be studied in the SecSafe project. These
properties are to be checked by static analyses. The current version of the document only …

McGraw and Felton provide an accessible overview of Java security issues. The first chapter
introduces problems related to mobile code security and approaches based on the sandbox …

Java applications often need to incorporate native-code components for efficiency and for
reusing legacy code. However, it is well known that the use of native code defeats Java's …

Java is a safe language. Its runtime environment provides strong safety guarantees that any
Java application can rely on. Or so we think. We show that the runtime actually does not …

For performance and for incorporating legacy libraries, many Java applications contain
native-code components written in unsafe languages such as C and C++. Native-code …

A specification of Java loading and bytecode verification Page 1 A Specification of Java
Loading and Bytecode Verification Allen Goldberg Kestrel Institute 3260 HillviewAv. Palo Alto …

Java™SecurityArchitecture(JDK1.2) Page 1 Java™SecurityArchitecture(JDK1.2) Author: Li
Gong (li.gong@sun.com) Date: October 2, 1998 Version 1.0 This document gives an overview of …

Security in Java depends on an access control mechanism specified operationally in terms
of run-time stack inspection. We give a denotational semantics in “eager” form, and show …