3. Requirements • Upgrade JRE before JDK • Same version JDK for the client and server. • Same version of the compiled code for client and server • JRE upgrade done on a rolling two-year schedule • JDK upgrade done on a rolling two-year schedule
4. Affected application:s • About 60 own developed applications impacted • Both the server and client • Some acquired software
6. Security enhancing for client applications • Java code signing for Java-applets • We had 17 ......!? • We used Deployment Rule Set ( 7_40) • Handles all applets in one place
7. New monitoring tools ( Server) • Java Mission Control • Enabling after-the-fact incident analysis • Java Flight Recorder • Built into the Oracle JDK