loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
20th Annual Computer Security Applications Conference (ACSAC'04)
.NET Security: Lessons Learned and Missed from Java
Tucson, Arizona
December 06-December 10
ISBN: 0-7695-2252-1
Nathanael Paul, University of Virginia
David Evans, University of Virginia
Many systems execute untrusted programs in virtual machines (VMs) to limit their access to system resources. Sun introduced the Java VM in 1995, primarily intended as a lightweight platform for execution of untrusted code inside web pages. More recently, Microsoft developed the .NET platform with similar goals. Both platforms share many design and implementation properties, but there are key differences between Java and .NET that have an impact on their security. This paper examines how .NET's design avoids vulnerabilities and limitations discovered in Java and discusses lessons learned (and missed) from Java's experience with security.
Citation:
Nathanael Paul, David Evans, ".NET Security: Lessons Learned and Missed from Java," acsac, pp.272-281, 20th Annual Computer Security Applications Conference (ACSAC'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.