Monitoring Java Application Security with JDK tools and JFR Events
summary
Shows how to use jcmd, JFR and JDK Mission Control to record and stream six JFR security events (only the initialSecurityProperties is enabled by default) and to capture TLS handshakes, X.509 validations and dynamic security property changes; demo uses Java 23 Spring Boot with mutual TLS, Docker/jlink and remote JMX (port 1099), records a 120s rec.jfr then a continuous 5‑minute circular recording, finds 47 initial security events, observes TLS 1.3 handshakes and certificate validity/key‑length details, and successfully exports metrics via JFR TLSHandshake events into Prometheus using JFR streaming to Prometheus.
AI-written summary · about
chapters (11)
- 0:00Introduction to JFR
- 1:07Understanding JFR events
- 2:23Security-specific JFR events
- 4:50Local tic-tac-toe demo setup
- 7:17Configuring security monitoring
- 8:49Running the JFR demo
- 12:01Analyzing local JFR results
- 19:21Cloud deployment demo
- 24:06Streaming events to cloud
- 27:25Live traffic analysis
- 30:21Data sanitization and wrap-up
related talks
52mMonitoring Java Application Security with JDK tools and JFR Events
51mMonitoring Java Application Security with JDK tools and JFR Events
52mMonitoring Java Application Security with JDK Tools and JFR Events
30mMonitoring Java Application Security with JDK Tools and Event...
05mAna Maria Mihalceanu at JNation 2024
42mProfiling and monitoring with the JDK
42mContinuous Monitoring with JDK Flight Recorder
39mProfiling and Monitoring with the JDK