Current approaches to Java application protection place security at the application or the network layer, both of which are problematic. The first approach has proven to be too complex, too time consuming and too risky — in other words, “too hot.”
Meanwhile, network level security that consists of perimeter devices lacks the intelligence to know what’s going on inside the application in order to be effective. This approach is “too cold.” A third alternative is to place security inside the Java virtual machine.
Taking the Temperature of Java App Security
Posted by: John Matthew Holt August 11, 2014 06:23 AMCurrent approaches to Java application protection place security at the application or the network layer, both of which are problematic. The first approach has proven to be too complex, too time consuming and too risky — in other words, “too hot.”
Meanwhile, network level security that consists of perimeter devices lacks the intelligence to know what’s going on inside the application in order to be effective. This approach is “too cold.” A third alternative is to place security inside the Java virtual machine.