Monitoring Java Application Security with JDK tools and JFR Events
summary
Shows how to use JDK Flight Recorder plus keytool, jcmd and JDK Mission Control to record and inspect security settings, TLS handshakes and X.509 details; enables JFR events (initial security properties, security property modification, TLS handshake, x509 validation) and starts recordings at runtime with jcmd. Builds a Mutual TLS Spring Boot TicTacToe app, containers it with jlink and Docker Compose, connects via JMX, streams events into Prometheus, observes 351 security provider invocations and captured TLS versions, cipher suites and certificate fields, and the setup works end to end.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:26JFR security events overview
- 8:30Observing JDK security properties
- 13:28Monitoring TLS protocol
- 29:27Analyzing X509 certificates
- 33:00Demo in cloud environment
- 41:38Continuous monitoring options
- 48:21Resources and Q&A
related talks
52mMonitoring Java Application Security with JDK Tools and JFR Events
32mMonitoring Java Application Security with JDK tools and JFR Events
30mMonitoring Java Application Security with JDK Tools and Event...
52mMonitoring Java Application Security with JDK tools and JFR Events
42mProfiling and monitoring with the JDK
39mProfiling and Monitoring with the JDK
46mContinuous Monitoring with JDK Flight Recorder
39mProgrammer's Guide to JDK Flight Recorder