Rec. 15. Platform Security (SEC)

• Page:
  SEC50-J. Avoid granting excess privileges
• Page:
  SEC51-J. Minimize privileged code
• Page:
  SEC52-J. Do not expose methods that use reduced-security checks to untrusted code
• Page:
  SEC53-J. Define custom security permissions for fine-grained security
• Page:
  SEC54-J. Create a secure sandbox using a security manager
• Page:
  SEC55-J. Ensure that security-sensitive methods are called with validated arguments
• Page:
  SEC56-J. Do not serialize direct handles to system resources
• Page:
  SEC57-J. Do not let untrusted code misuse privileges of callback methods
• Page:
  SEC58-J. Deserialization methods should not perform potentially dangerous operations

Risk Assessment Summary