An Empirical Security Study of the Native Code in the JDK

It is well known that the use of native methods in Java defeats Java's guarantees of safety and security, which is why the default policy of Java applets, for example, does not allow loading non-local native code. However, there is already a large amount of trusted native C/C++ code that comprises a significant portion of the Java Development Kit (JDK). We have carried out an empirical security study on a portion of the native code in Sun's JDK

• Type: Conference
• Year: 2008
• Where: USS
• Authors: Gang Tan, Jason Croft
• Keywords: Defeats Java Guarantees, Native Code, Non-local Native Code, Operating System, USS 2008