Monitoring Java Application Security with JDK Tools and Event...
summary
How to collect and analyze JVM security telemetry for a Spring Boot tic‑tac‑toe app running on Java 21/22 by enabling Java Flight Recorder (JFR) security events (four are disabled by default since JDK 12), starting recordings with jcmd or Flight Recorder startup, and inspecting TLS handshakes, X.509 certificate details and security property changes. Demonstrations show using JDK Mission Control to view a 60‑second recording that captures a client‑cert login and TLS 1.3 selection, plus streaming JFR events to Prometheus from containers (Docker/Podman) and from Oracle Cloud.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:03JFR security events
- 3:12Local TicTacToe demo
- 12:59TLS protocol monitoring
- 15:50Remote environment demo
- 21:41Active monitoring with JMX
- 23:51Export to Prometheus and Cloud
- 28:31Conclusion
related talks
51mMonitoring Java Application Security with JDK tools and JFR Events
52mMonitoring Java Application Security with JDK tools and JFR Events
32mMonitoring Java Application Security with JDK tools and JFR Events
52mMonitoring Java Application Security with JDK Tools and JFR Events
42mProfiling and monitoring with the JDK
39mProfiling and Monitoring with the JDK
01h 09mContinuous Monitoring With JDK Flight Recorder (JFR)
46mContinuous Monitoring with JDK Flight Recorder