db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From John Embretsen <John.Embret...@Sun.COM>
Subject Re: [jira] Commented: (DERBY-2109) System privileges
Date Wed, 20 Dec 2006 12:14:34 GMT
Daniel John Debrunner wrote:

> I think with a typical application in steady state, a security manager 
> will have little effect on performance, since during steady state most 
> likely there will be few security checks. It would be good to test this 
> with a real application/benchmark.

I found a paper published in "Computers & Security" (2005) on security manager 


Have not read the whole thing yet, but here's part of the conclusion:

"Test results show that there is an execution time penalty of approximately 100% 
for Java-defined resources when the resource access runs under a Security 
Manager. The resource access to operating system resources (files, sockets) is 
so expensive that it hides the time penalty of the Security Manager almost 


"A performance boost can be achieved by memory tuning and, to a lesser degree, 
the right order of permissions in the policy file."


View raw message