An extensible framework for analysis of Java language-based security conformance

Java是一种运行在30亿台设备上的编程语言和平台。虽然Java在Java类库中提供了基于沙箱的安全体系结构，以保护系统免受从Internet下载的不可信代码的影响，但它无法防御Java类库中发生的实现错误。该项目的目标是提供Java安全体系结构的正式模型，程序分析员可以使用该模型来识别Java类库中可能导致沙盒被绕过的错误或不足的安全检查。

Java is a programming language and platform running on 3 billion devices. While Java provides a sandbox-based security architecture within the Java Class Library to protect systems from untrusted code downloaded from Internet, it cannot defend against implementation bugs that occur in the Java Class Library. The goal of this project is to provide a formal model of the Java security architecture, which can be used by program analysers to identify faulty or insufficient security checks in the Java Class Library that may lead to the sandbox being bypassed.