Java provides several APIs that allow outside programs to monitor a running Java program. These APIs permit the Java program to be monitored remotely by programs on distinct hosts. Such features are handy for debugging the program, or fine-tuning its performance. However, if a Java program is deployed in production with remote monitoring enabled, an attacker can connect to the JVM and inspect its behavior and data, including potentially sensitive information. An attacker can also exert some control over the program's behavior. Therefore Consequently remote monitoring must be disabled when running a Java program in production.
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f20c3bbfaa1774ac-d6c46872-4fa343d1-9c87a3da-764fdde628419c0049ca7f06"><ac:plain-text-body><![CDATA[ | [[JMX 2006 | AA. Bibliography#JMX 06]] |
| ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="0b4d14130a596d5d-a7aa8744-456b4ef1-827abd84-ff31b809527ba86206c884c2"><ac:plain-text-body><![CDATA[ | [[JMXG 2006 | AA. Bibliography#JMXG 06]] |
| ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e5f773c80eafac92-47b3dba7-421945df-9bab9474-19e0585c740c18b5fb6fc6a5"><ac:plain-text-body><![CDATA[ | [[JPDA 2004 | AA. Bibliography#JPDA 04]] |
| ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a64ac8cdd1e281ed-0f5fe089-400f4b5d-b7688386-da70e41b7b707b9eafc36051"><ac:plain-text-body><![CDATA[ | [[JVMTI 2006 | AA. Bibliography#JVMTI 06]] |
| ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="925eed334ef5fbff-f8c7b870-4ec24e4d-b44ea8ef-17fd984b5e3f6428ccfa2430"><ac:plain-text-body><![CDATA[ | [[Long 2005 | AA. Bibliography#Long 05]] | Section 2.6, The JVM Tool Interface, Section 2.7, Debugging, Section 2.8, Monitoring and Management | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="0b56afe26c1c17d9-c4382f4d-49d54828-b1e98942-25b3ba21f3635d0ed7982653"><ac:plain-text-body><![CDATA[ | [[Reflect 2006 | AA. Bibliography#Reflect 06]] | [Reflection | http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006) | ]]></ac:plain-text-body></ac:structured-macro> |
...