Java, Extensibility and Security Related Links
Here are a set of pointers to Internet-wide resources for Java, security and extensible operating systems. If you know of a set of pages that you think are relevant,
please let me know.
JavaSoft Security Site
The new Java Security Model
Java Security FAQ
Low level security in Java.
JavaSoft security doc
Java Security Hotlist
Netscape's security model
is a way to exploit Java's type resolution and dynamic linking mechanisms to circumvent type-safety.
Policy directed code safety.
Andrew Myers' group at Cornell.
ActiveX security flaws
MS Authenticode 2.0
patches the revocation and staleness problems in 1.0.
The SPIN Project
in the SPIN OS. (
in the SPIN OS.
Sun's KVM project
also known as Kona.
java development suite includes a source-to-bytecode compiler, assembler & disassembler.
A free JIT compiler.
A free JVM implementation.
from Bell Labs.
Proebsting & Hartman's mobile Java code group.
A Java bytecode to C decompiler.
is a highly optimizing compiler infrastructure that supports Java bytecode to native code translation.
, a distributed operating system.
Advanced type systems in computing
work at the Navy Post-Graduate School.
Safe Language Kernel
project at Cornell.
recently acquired by Sun.
Virtual Virtual Machines
Java Soft Products
Top level info.
Java chips - an application of Java that requires a solid verifier.
Hardware specs for the Java chips from Sun.
tapes out at Sun.
IBM announces VLIW Java chips
(May 19, 1997)
demos the first commercial Java chip. (September 20, 1997)
APIs and Libraries
Java runtime environment from JavaSoft.
Java Threads and Synchronization
Java Management API
Java Telephony API
class libraries. Freely available standard java packages.
Freely available, portable awt implementation.
Cross-platform API for browser integration.
PDF library 1
PDF library 2
PDF library 3
Blowfish, CRC16, CRC32, DES, DES3, IDEA, RC4, ROT13, and more.
A complete crypto API for Java (with HTML documentation)
SIGS Conference for Java Development
October 19-23, 1998. San Jose Convention Center, San Jose, CA.
Workshop on Security and Languages
October 1997, Palo Alto.
DARPA OS Security Workshop
June 1997, D.C.
Java Developer Conference
by Li Gong in JavaOne 97.
Presentations on Java related work from 1996.
A Java-like virtual machine.
makes Java based real-time operating systems for networking.
is another company developing a real-time Java VM.
Integrated Systems Inc licenses Java from NewMonics.
screens some bad applets.
has the CaffeineMark(tm) benchmark for measuring Java engine performance.
offers ORB support for those who need it.
has an aggresive optimizing compiler.
is a Javasoft/KeyLabs label. The "100% Pure" Java label does not imply full bytecode conformance to the Java virtual machine specification.
relies on physical separation for security.
builds reliable distributed systems.
Cable & Wireless Systems
specializes in public key infrastructure and digital certification.
pages on garbage collection and his freely available collector.
papers on garbage collection.
Newmonics GC survey
. It generates jasmin compatible hypertext.
A Java bytecode assembler.
- Obfuscators are tools that remove or replace the symbolic information in a Java class file in order to make decompilation more difficult.
Obfuscate home page
JOBE - The Java Obfuscator
- Why obfuscators exist.
. A decompiler for Java.
of decompilation techniques.
The Cifuentes decompiler from x86 to C.
Microsoft Internet Explorer
Netscape Plugin Documentation
What are plugins, how do they work, and what can you do with them.
JDK 1.1 support in Netscape Communicator 4.0
for Netscape Communicator 4.
Applet Useability: Stepping Outside the Page
Bogda et al.
at OOPSLA '99.
Rinard et al.
at OOPSLA '99.
Choi et al.
at OOPSLA '99.
Blanchet et al.
at OOPSLA '99.
Keynote address at JavaOne96.
Java links and resources.
Java Programmer FAQ
Cafe Au Lait
Java Security: Hostile Applets, Holes, & Antidotes
Java Code Engineering & Reverse Engineering
Focus on Java
from the Mining Co.
page contains a large number of denial of service attacks.
Daily Java news compilation.
Java Resource Links
Seattle Java Users Group.
Rotherwick Firewall Resource
. A list of packet firewall related information.
security related links.
Foresight Fact Forum
Mining Co. Security Resource List
Emin Gün Sirer
Department of Computer Science and Engineering
University of Washington