Java Security

Java is flexible software framework created by Sun Microsystems (which has since merged with Oracle Corporation). Java allows the creation of cross-platform web-based applications or "Applets" and also (more rare) stand-alone Java applications. Web-based Java Applets require that your web browser has the appropriate Java plugin installed and activated. Stand-alone applications require the Java framework client to be installed your computer (Mac or PC).

 

Java Security Advisory

In January of 2013 the Department of Homeland Security released an alert indicating that high-risk Java vulnerabilities existed and recommended that Java be disabled or removed until a fix could be developed by Oracle. After the fix for the identified vulnerabilities was released by Oracle, the US Department of Homeland Security and the United States Computer Emergency Readiness Team (US-CERT) continued to recommended that Java be disabled in web browsers.

Some campus and CSU systems such as PeopleSoft, BB Learn, and CSU provided on-line training require that Java be enabled in the web browser. To support mission critical campus priorities, CSU Chico recommends that Java be enabled only when necessary to support authorized campus services. Most versions of Java can be enabled and disabled through a control panel (see instructions below). It is recommended that computers that store or access sensitive Level 1 or Level 2 data do not enable Java under any circumstances.

 

CSU, Chico Java Security Recommendations

Only enable Java when you need to use it for a specific task.

Disable Java when not in use.
Instructions for disabling Java via the Java control panel or in your preferred web browser are provided on the Java.com website:
http://www.java.com/en/download/help/disable_browser.xml

Install the latest version of Java.
Check your current version here: http://www.java.com/en/download/installed.jsp
Download the latest version from java.com here: http://www.java.com/en/download/

Remove older versions of Java.
Instructions for Windows: http://www.java.com/en/download/help/uninstall_java.xml
Instructions for Macintosh: http://www.java.com/en/download/help/mac_uninstall_java.xml

 

For questions please contact ITSS. 

Was this helpful?
0 reviews

Details

Article ID: 15004
Created
Thu 7/21/16 9:28 AM
Modified
Tue 1/24/17 3:50 PM