1. Diagrams and Sample Code from the Java Tutorial,
Java Security
Diagrams and Sample Code from the Java Tutorial,

2. JDK 1.0 Security Model

3. JDK 1.1 Security Model

4. JDK 1.2 Security Model

5. Security Infrastructure

6. Applet Security Example

7. Applet Security Example

8. After setting Security Policy

9. Application Security
Applications (local code) have all permissions by default
To add security: java -Djava.security.manager GetProps

10. Generating Signed Code
Write and compile code
Add compiled class to Jar file
Generate public and private keys
Sign jar with private key
Export public key

11. Using Signed Code Security manager rejects unverified code
Import Susan’s public key from .cer file into keystore
Use policy tool to grant permission to code signed by Susan
Security manager allows signed code with stated permissions