sandbox LastModified: Monday, September 30, 2002
A security measure in the Java development environment. The sandbox is a set of rules that are used when creating an applet that prevents certain functions when the applet is sent as part of a Web page. When a browser requests a Web page with applets, the applets are sent automatically and can be executed as soon as the page arrives in the browser. If the applet is allowed unlimited access to memory and operating system resources, it can do harm in the hands of someone with malicious intent. The sandbox creates an environment in which there are strict limitations on what system resources the applet can request or access. Sandboxes are used when executable code comes from unknown or untrusted sources and allow the user to run untrusted code safely. The Java sandbox relies on a three-tiered defense. If any one of these three elements fails, the security model is completely compromised and vulnerable to attack: byte code verifier -- This is one way that Java automatically checks untrusted outside code before it is allowed to run. When a Java source program is compiled, it compiles down to platform-independent Java byte code, which is verified before it can run. This helps to establish a base set of security guarantees. applet class loader -- All Java objects belong to classes, and the applet class loader determines when and how an applet can add classes to a running Java environment. The applet class loader ensures that important elements of the Java run-time environment are not replaced by code that an applet tries to install. security manager -- The security manager is consulted by code in the Java library whenever a dangerous operation is about to be carried out. The security manager has the option to veto the operation by generating a security exception. Sponsored listings Childrens Outdoor Playground Equipment from LSI - Landscape Structures manufactures safe and durable commercial playground equipment including slides, swings, jungle gyms, play structures and more.
Breaking the Sandbox Barrier This article explains the Java "Sandbox" model and tells when it is necessary to cross the restrictions imposed by the model. Gamelan.com A resource site that provides article, tutorials and downloads for the Java development community. Security in the Large: Is Java's Sandbox Scalable? Even though a lot of work has been done on Java security, due to weaknesses inherent in the Java approach to building sandboxes, Java security is not suitable when applied to large-scale distributed systems. The Base Java Security Model: The Original Applet Sandbox A comprehensive look at Java security. Understanding the Keys to Java Security A detailed look at the latest security features in Java -- and the recently discovered code-signing hole.	related categories: Programming Languages Security related terms: applet browser compiler Java JVM sandbox Products : Top Store Offers: School Outfitters  61.99The Whitney Brothers' Laptop Sandbox brings outside activities indoors and lets young students work on motor skills. Kids can create designs in sand, ... Albee Baby  149.95Step right up kids and have beach fun under the big top in your own backyard with the KidKraft Big Top Wooden Sandbox! Amazon  59.76Removable lid to keep sandbox clean and protected Includes working excavator, plow tractor, front end loader, and hand shovel Minimal adult assembly r... Big Toy Express  54.98Compact sandbox fits into smaller play areas. Hold 100 lbs. of sand. Sand and accessories not included. Made in the USA by Step2. SHIPPING INCLUDED IN... eBay  39.95Tonka P.O.D.S. (See photos below) Hi! Welcome to Weaim2pleez....Here is a Tonka Boulder Canyon P.O.D.S. Super Playset. Great for indoor or outdoor pla... Compare all matches: 343 Store Offers