Java - Security

Perminssion | Policy | Security

Typically, a web applet runs with a security manager provided by the browser or Java Web Start plugin. Other kinds of applications normally run without a security manager, unless the application itself defines one. If no security manager is present, the application has no security policy and acts without restrictions.

Policy FIle = The policy configuration file(s) for a JDK or JRE installation specifies what permissions (which types of system resource accesses) are granted to code from a specified code source, and executed as a specified principal.

java.security (Default Policy File)= A policy file that defines security policy

-Djava.security.manager = The "-Djava.security.manager" argument ensures that the default security manager is installed, and thus the application is subject to policy checks.



Others--

Language features such as automatic memory management, garbage collection, and range checking on strings and arrays are examples of how the language helps the programmer to write safe code.