Monitoring Java Application Security with JDK tools and JFR Events
summary
Shows how to record and inspect Java security state using JDK Flight Recorder plus jcmd, jfr configure, JDK Mission Control and keytool; six JFR security events exist (initial properties is enabled by default, others must be enabled) and one demo records ~115 TLS handshake events in one minute, capturing TLS version, cipher suite, peer info, certificate ID and stack traces. Demonstrates jfr scrub, streaming JFR events programmatically (since JDK 16) to Prometheus/Grafana for continuous monitoring, and printing x509 details (algorithm, issuer, validity).
AI-written summary · about
chapters (13)
- 0:00Java security monitoring intro
- 1:47Agenda
- 2:47JDK Flight Recorder security events
- 5:57JFR security properties
- 11:35TLS handshake monitoring
- 16:18Live demo: Tic-Tac-Toe with mTLS
- 26:15X.509 certificate analysis
- 30:50Remote monitoring with JMC
- 37:15Cloud continuous monitoring
- 41:10Oracle Cloud + Prometheus
- 43:06Live demo: Prometheus metrics
- 47:20Resources & closing
- 47:41Q&A
related talks
32mMonitoring Java Application Security with JDK tools and JFR Events
51mMonitoring Java Application Security with JDK tools and JFR Events
52mMonitoring Java Application Security with JDK Tools and JFR Events
30mMonitoring Java Application Security with JDK Tools and Event...
42mProfiling and monitoring with the JDK
39mProfiling and Monitoring with the JDK
46mContinuous Monitoring with JDK Flight Recorder
42mContinuous Monitoring with JDK Flight Recorder