Page History

...

Deploying a Java application with the JVMTI, JPDA, or remote monitoring enabled can allow an attacker to monitor or modify its behavior.

Rule	Severity	Likelihood

Remediation Cost

Detectable	Repairable	Priority	Level
ENV05-J	High	Probable	No

Low

No

P18

P6

L1

L2

Automated Detection

This rule is not amenable to automated static analysis.

...

JVMTI is not supported on the Dalvik VM.


[JMXG 2006]


[JPDA 2004]


[Long 2005]	Section 2.6, "The JVM Tool Interface" Section 2.7, "Debugging" Section 2.8, "Monitoring and Management"
[Reflect 2006]	Reflection

...