Problems Running Untrusted Services as Java Threads

A number of Java environments run untrusted services as Java threads. However, Java threads may not be suitably secure for this task because of its problem with safe termination, resource control and thread isolation. These problem areas have been recognised by the research community and are comprehensively addressed in the not yet implemented Java Isolate API. Meanwhile, Java threads continue to be used for running untrusted code. This paper examines the risks associated with Java threads that run untrusted code and presents existing research solutions. Requirements for a secure execution environment are presented. The requirements are contrasted by recommendations and problems when using Java threads for running untrusted code.