Java Security

• Compiled VM code is checked by a byte-code verifier
• Access to many resources is controlled by a Security Manager
• Default Security Manager allows no local disk access or local process creation
• The native code libraries must be secure