Table of Contents

1 Introduction

1.1 The Original Sandbox Model

1.2 Evolving the Sandbox Model

2 New Protection Mechanisms -- Overview of Basic Concepts

3 Permissions and Security Policy

3.1 The Permission Classes

3.1.1 java.security.Permission

3.1.2 java.security.PermissionCollection

3.1.3 java.security.Permissions

3.1.4 java.security.UnresolvedPermission

3.1.5 java.io.FilePermission

3.1.6 java.net.SocketPermission

3.1.7 java.security.BasicPermission

3.1.8 java.util.PropertyPermission

3.1.9 java.lang.RuntimePermission

3.1.10 java.awt.AWTPermission

3.1.11 java.net.NetPermission

3.1.12 java.lang.reflect.ReflectPermission

3.1.13 java.io.SerializablePermission

3.1.14 java.security.SecurityPermission

3.1.15 java.security.AllPermission

3.1.16 javax.security.auth.AuthPermission

3.1.17 Discussion of Permission Implications

3.1.18 How To Create New Types of Permissions

3.2 java.security.CodeSource

3.3 java.security.Policy

3.3.1 Policy File Format

3.3.2 Property Expansion in Policy Files

3.3.3 General Expansion in Policy Files

3.3.4 Assigning Permissions

3.3.5 Default System and User Policy Files

3.3.6 Customizing Policy Evaluation

3.4 java.security.GeneralSecurityException

4 Access Control Mechanisms and Algorithms

4.1 java.security.ProtectionDomain

4.2 java.security.AccessController

4.2.1 Algorithm for Checking Permissions

4.2.2 Handling Privileges

4.3 Inheritence of Access Control Context

4.4 java.security.AccessControlContext

5 Secure Class Loading

5.1 Class Loader Class Hierarchies

5.2 The Primordial Class Loader

5.3 Class Loader Delegation

5.4 Class Resolution Algorithm

6 Security Management

6.1 Managing Applets and Applications

6.2 SecurityManager versus AccessController

6.3 Auxiliary Tools

6.3.1 The Key and Certificate Management Tool

6.3.2 PolicyTool

6.3.3 The JAR Signing and Verification Tool

7 GuardedObject and SignedObject

7.1 java.security.GuardedObject and java.security.Guard

7.2 java.security.SignedObject

8 Discussion and Future Directions

8.1 Resource Consumption Management

8.2 Arbitrary Grouping of Permissions

8.3 Object-Level Protection

8.4 Subdividing Protection Domains

8.5 Running Applets with Signed Content

9 Summary

10 Acknowledgments

11 References

12 Revision History