Block Hostile Java Applets

Derek Jones

Are you sure the Java applet you just downloaded is what it says it is? Of course, there's no way to tell. But Finjan Software's SurfinShield, a Java applet firewall, gives you some protection against rogue applets.

It works by attacking an applet at two levels: its digital signature and the applet's use of system resources. Restricting applet usage to those that are digitally signed is effective as long as legitimate applets are always signed and you can quickly verify signatures. A signature does not guarantee integrity, but it guarantees that the applet has not been modified by a third party.

Because the majority of applets are still unsigned, SurfinShield maintains a signature database of suspect applets and does n ot allow the downloading of applets with registered signatures. But given the exploding rate of global applet creation, whether such a database can be effectively maintained is doubtfl.

In addition, SurfinShield monitors and displays a downloaded applet's use of system resources. It flags all applets that exceed predefined resource limits and doesn't allow such applets to run. But monitoring resource usage is effective only if the characteristics of rogue applets are sufficiently different from those of legitimate ones.

SurfinShield's Java security is not foolproof, but it adds a thin layer of security to your PC. A free 30-day evaluation license for SurfinShield is available from Finjan's Web site ( http://www.finjan.com ). In addition, a version for ActiveX controls should be available soon.

---

Where to Find

SurfinShield......................$99

Finjan Software
South Netanya, Israel
Phone:    +972 9 865 9440
Fax:      +972 9 865 9441
Internet: 
http://www.finjan.com

Circle 977 on Inquiry Card.

HotBYTEs
 - information on products covered or advertised in BYTE

---

Shield Your Surfin'

screen_link (70 Kbytes)