An extensible framework for analysis of Java language-based security conformance

Java是一种在30亿台设备上运行的编程语言和平台。虽然Java在Java类库中提供了一个基于沙箱的安全体系结构，以保护系统免受从Internet下载的不可信代码的攻击，但它无法防御Java类库中发生的实现错误。这个项目的目标是提供一个正式的Java安全体系结构模型，程序分析器可以使用它来识别Java类库中可能导致沙箱被绕过的错误或不充分的安全检查。

Java is a programming language and platform running on 3 billion devices. While Java provides a sandbox-based security architecture within the Java Class Library to protect systems from untrusted code downloaded from Internet, it cannot defend against implementation bugs that occur in the Java Class Library. The goal of this project is to provide a formal model of the Java security architecture, which can be used by program analysers to identify faulty or insufficient security checks in the Java Class Library that may lead to the sandbox being bypassed.