Monitoring Java Application Security with JDK Tools and JFR Events
summary
Shows how to record and inspect concrete security signals using keytool, jcmd, JFR and JDK Mission Control including the JFR TLS-handshake event and the jdk x509 certificate event. Demonstrates a Spring Boot tic tac toe service running in Docker with mutual TLS, captures 11 certificate validation records, prints negotiated TLS version and cipher suite from JFR, toggles initial security property and modification events, and streams JFR events programmatically to Prometheus for continuous monitoring.
AI-written summary · about
chapters (11)
- 0:00Introduction to session
- 1:48JFR security events overview
- 5:23JDK security properties
- 10:37Monitoring TLS protocol
- 15:43Demo setup and issues
- 22:01Demo restart and recording
- 28:47Inspecting TLS handshake events
- 32:21Cloud monitoring with containers
- 38:38Continuous monitoring in cloud
- 45:17Resources and community links
- 48:25Q&A session
related talks
51mMonitoring Java Application Security with JDK tools and JFR Events
32mMonitoring Java Application Security with JDK tools and JFR Events
52mMonitoring Java Application Security with JDK tools and JFR Events
30mMonitoring Java Application Security with JDK Tools and Event...
05mAna Maria Mihalceanu at JNation 2024
44mA Glance At The Java Performance Toolbox
42mProfiling and monitoring with the JDK
39mProfiling and Monitoring with the JDK