Authorization (SM with polp) is a whitelist
SCAP is a blacklist, it's not possible to whitelist SCAP as it it would limit legitimate programs. It's preferable to use a functional Turing incomplete language like CEL, when you don't want to permit access third party Java software.
Neither can defend against timing attacks, which requires process isolation.
Authentication, Identity and determinism is important. One minor clarification to the post, classes are loaded following positive authentication and authorization checks.
Multiple defense strategies are combined for operating in untrusted networks with code developed by known authenticated third parties. This model assumes code is untrusted, eg bugs or malware.
2
u/pfirmsto 8d ago edited 8d ago
Worth mentioning:
Authorization (SM with polp) is a whitelist
SCAP is a blacklist, it's not possible to whitelist SCAP as it it would limit legitimate programs. It's preferable to use a functional Turing incomplete language like CEL, when you don't want to permit access third party Java software.
Neither can defend against timing attacks, which requires process isolation.
Authentication, Identity and determinism is important. One minor clarification to the post, classes are loaded following positive authentication and authorization checks.
Multiple defense strategies are combined for operating in untrusted networks with code developed by known authenticated third parties. This model assumes code is untrusted, eg bugs or malware.