Chapter 12, Problem 4IR

Explanation of Solution

Java security flaws from two articles:

• As java in browser is Operating System (OS) independent and it has the popular run-time environment in desktop browsers, java becomes more attractive target for malicious attacker.
• Oracle is decided to move rapidly to fix the java flaws.
• In 2013, Oracle released a critical one-off path update to fix the issue before two weeks of the issue being actively exploited...

Explanation of Solution

Processes of informing users about the need to obtain updates to fix security holes:

• A Critical Patch Update program is a group of patches for various security vulnerabilities where patches are a set of changes such as update, and fixing the data to a computer system.
• Oracle informs the users that they need to be remains in actively supported version and apply for the Critical Patch Update program.
• Critical Patch Update program releases the patches for the product versions covered by premier support or extended support of Lifetime Support Policy...

Explanation of Solution

In the world, there are 5 to 10 billion devices have java installed.

Devices that have java installed:

• In the world, 1.1 billion desktop systems run java...

Explanation of Solution

Ways to identify whether java is installed on a computer

• If the user uses command prompt to identify the installation of java.
• After installing java, the user needs to set “PATH” variable in environmental variables.
• Then, the user types the command “java –version” in terminal.
• After running the above command, if java is installed on a computer then it shows the version of java, java Standard Edition (SE) Environment’s build and Java HotSpot client Virtual Machine’s (VM) build.
• The user can also use program that reads java system properties to identify whether it is installed or not...