Diagrams and Sample Code from the Java Tutorial, Java Security Diagrams and Sample Code from the Java Tutorial, http://java.sun.com/docs/books/tutorial/security1.2/

JDK 1.0 Security Model

JDK 1.1 Security Model

JDK 1.2 Security Model

Security Infrastructure

Applet Security Example

Applet Security Example

After setting Security Policy

Application Security Applications (local code) have all permissions by default To add security: java -Djava.security.manager GetProps

Generating Signed Code Write and compile code Add compiled class to Jar file Generate public and private keys Sign jar with private key Export public key

Using Signed Code Security manager rejects unverified code Import Susan’s public key from .cer file into keystore Use policy tool to grant permission to code signed by Susan Security manager allows signed code with stated permissions