~/talk

Making the Future Secure with Java

on YouTube 50m
Talkat AppSecUSA 2013 · 2013-11-20..11-21· [security]

speaker

name:Milton Smith
links:none on file

resources

video:https://youtu.be/L2Bgn6xMog0
slides:none on file

summary

Oracle documents show concrete moves: Java 8 slips to Q1 2014 because of security, CPUs go quarterly, and remediation tempo jumps (one CPU fixes 55 vulnerabilities). Platform changes include a disable-Java tick box, hardcoded expiry dates in the JRE, a tightened security slider, dynamic blacklisting, revocation checks enabled by default after interoperability work, an improved uninstaller, and an enterprise deployment rule set (DRS). January sets self-signed and unsigned blocked by default, and blogs plus CVSS triage guide fixes and impact.

AI-written summary · about

chapters (32)

  1. 0:00Intro
  2. 2:20Java is an Open Ecosystem An application platform but what's that?
  3. 3:54Where is Java? The Java Ecosystem...
  4. 4:20Security Policies Larger policy areas.
  5. 5:03Security Policies - Communications News communicated via several channels...
  6. 7:01Security Policies - Communications (cont'd) Why we don't respond to alleged security vulnerabilities?
  7. 9:41Security Policies - Remediation
  8. 11:48Security Throughout Development Lifecycle Security applied to generalized development methodology...
  9. 13:01Security Throughout Development Lifecycle (cont'd) Some areas of security working outside the development lifecycle.
  10. 14:38What is Oracle's Position on Java Security?
  11. 15:55What is Oracle Doing in Java Security?
  12. 17:16How Serious is Oracle on Java Security?
  13. 20:13Remediated Vulnerabilities by Component Subtype
  14. 21:24Critical Patch Update Process CPUs are Oracle security patches...
  15. 22:40Enable/Disable Java in Web Browsers (Java 7 Update 10)
  16. 23:42Hardcoded best before date in JRE (Java 7 Update 10)
  17. 24:53Java Security Slider (Java 7 Update 10)
  18. 25:34Remove "Low" and "Custom" from Slider (Java 7 Update 21)
  19. 26:38Dynamic Blacklisting Expanded (Java 7 Update 21)
  20. 27:04Signing for sandboxed applications (Java 7 Update 21)
  21. 28:08Enable Standardized Revocation Services (Java 7 Update 25)
  22. 29:56Deployment Rule Set (Java 7 Update 40)
  23. 31:13Old JRE Warning (Java 7 Update 40)
  24. 31:56Java Uninstaller (Ongoing)
  25. 32:45Outreach Highlights for Milton
  26. 33:36PM Blog Java platform security news...
  27. 35:09JavaOne Developer Conference
  28. 38:02Deprecation of Self-Signed and Unsigned Applets
  29. 40:45Java Platform Support
  30. 41:04Java Root Certificate Program
  31. 41:46Help Us Keep You Secure
  32. 45:01Questions?

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.