Java Security

Chapter 1. Java Application Security

When Java was first released by Sun Microsystems, it attracted the attention of programmers throughout the world. These developers were attracted to Java for different reasons: some were drawn to Java because of its cross-platform capabilities, some because of its ease of programming (especially compared to object-oriented languages like C++), some because of its robustness and memory management, some because of Java’s security, and some for still other reasons.

Just as different developers came to Java with different expectations, so too did they bring different expectations as to what was meant by the ubiquitous phrase “Java is secure.” Security means different things to different people, and many developers who had certain expectations about the word “security” were surprised to find that their expectations were not necessarily shared by the designers of Java.

This book discusses the features of Java that make it secure. In this book, we’ll discuss why Java is said to be secure, what that security means (and doesn’t mean), and—most importantly—how to use the security features of the Java platform within your own programs. This last point is actually the focus of this book: while some of Java’s security features are automatically a part of all Java programs, many of them are not. In this book, we’ll learn about all those features, and how to utilize them in our own Java applications.

What Is Security?

The first thing that we must do to facilitate ...