Java Security
Issues
Selected issues identified
by Internet/Network Security Guide
ABA
JCE
Clean room implementation of the Java Cryptography
Extension
Condensity
Java obfuscator and class file shrinker
CryptoJ
Encryption library
DashO
Java obfuscator and packager
Jad
Java decompiler
Java
Secure Socket Extension (JSSE)
Sun's implementation of SSL and TLS
J/Crypto
Encryption
library
J/SSL
Encryption
library
JCloak
Java obfuscator and packager
Jopt
Class file optimizer
NMI's Java Code
Viewer
Java decompiler
ObfuscatePro
Java bytecode obfuscator with exclusion
Phaos SSLava
Encryption library
Soot
Java optimization framework
Source
Again
Java decompiler
SourceGuard
Java obfuscator
Zelix KlassMaster
Java obfuscator
Hostile
Applets
A Collection of Increasingly Hostile Applets
Java
2 Network Security
PDF version of this IBM Redbook
Java Security
API
Home to Sun security resources and news
Java
Security Hotlist
Resources from the authors of Securing Java, Dr. McGraw and Prof. Felten's book.
Includes annotations on good and bad links, and why.
Microsoft
Security Advisor Program
Microsoft specific security issues and concerns
Netscape
Security Center
Netscape specific security issues and concerns
Princeton
University
Studying the security in Java, ActiveX, and JavaScript for
Secure Internet Programming. A group that has found several Java security flaws.
Securing Java
Java Security book
Security
Tradeoffs: Java vs. ActiveX
A FAQ examining the security models of these two alternatives
SmartUpdate
Using SmartUpdate with Netscape 4
Sun's Applet
Security FAQ
For the security conscious. Great place to start.
University
of Washington
Their Project Kimera has found numerous flaws in the various
JDK releases.