Java - Integrity by Default

Presented by Ron Pressler - Architect (Java Platform Group - Oracle) during the JVM Language Summit (August 2024 - Santa Clara, CA).

To assist performance, portability, and security, the Java Platform is progressing toward a state where its abstractions, as well as programmer-defined abstractions, can be made robust and invariants can be locally guaranteed. Libraries may violate some invariants but only if that is selectively allowed by the application. The talk will cover the why and how of the vision of *Integrity by Default*.

Make sure to check the    • JVM Language Summit 2024   playlist.


Resources
• JEP draft: Integrity by Default ➤ https://openjdk.org/jeps/8305968
• JEP 451: Prepare to Disallow the Dynamic Loading of Agents ➤ https://openjdk.org/jeps/451
• JEP 471: Deprecate the Memory-Access Methods in sun.misc.Unsafe for Removal ➤ https://openjdk.org/jeps/471
• JEP 472: Prepare to Restrict the Use of JNI ➤ https://openjdk.org/jeps/472
• NSA Releases Guidance on How to Protect Against Software Memory Safety Issues ➤ https://www.nsa.gov/Press-Room/News-H...
• The Cost of Poor Software Quality in the U.S. ➤ https://www.synopsys.com/software-int...
• Cybercrime To Cost The World $10.5 Trillion Annually By 2025 ➤ https://cybersecurityventures.com/cyb...
• Cost of a Data Breach Report 2024 ➤ https://www.ibm.com/reports/data-breach
• OpenJDK ➤ https://openjdk.org
• Inside.Java ➤ https://inside.java

Chapters
0;00 Intro
1:18 How Things Have Changed
16:54 The Importance of Integrity
25:49 Integrity by Default
40:44 Q&A

Tags #Java #OpenJDK #Security