Build your professional network on facebook via our app Go to app
 
 1 of 5 in Topic  Next >>
Topic : Security Programming in .NET
  Rate : 
 
Created by : Priyanka Nath, Project Manager, Wipro technologies  | 08 28 2008 20:20:16 +0000
Industry : Communications and NetworkingFunctional Area : New Technologies(Technology)
Keywords : Java .NET Security
Activity:  1114 views;  last activity : 07 06 2010 20:18:09 +0000
Which of these is better when it comes to security. Lets discuss the advantages of one on top of the other.
 
Share
 
 
  Rate : 
 
 
.Net Vs Java
13
 
 
 
 
22
11
15
Support   Support
Top Argument
4
0
I think there are many vulnerabilities in early Java implementations while not many security vulnerabilities in the .NET virtual machine platform have been reported to date.
The most widely publicized security issue in .NET was W32.Donut, a virus that took control of the executable before the .NET runtime had control. Since the vulnerability occurs before the .NET runtime takes control, we consider this a problem with the way the operating system transfers control to .NET, not with the .NET platform. More vulnerabilities have been found in Java implementations because there are several different Java VM implementations whereas .NET’s number is from Microsoft’s sole
implementation.

By Priyanka Nath, Project Manager, Wipro technologies  08 28 2008 20:20:16 +0000
 
Top Argument
4
0

Hi friends,

It is Neither .NET and JAVA which can trust the application.

If there are 100 ways to lock, there will be 101 ways to break the lock.

It all depends on the people who write the code and algorithm they implement. The cryptography techniques they implement.

-Yuva


By Yuvaraj , Programmer & Designer, Cognizant Technology Solutions  02 23 2009 16:52:28 +0000
Arguments in: "Java vs. .NET Security"
0
0

I think Java is a strong language but since it allows you to play with the low level components of the program as well... u can create many malicious applications with it as well...

Whereas in .Net... u can control that...more over .Net provides u cross language programming functionality which is a boon for a industry having multiple language programmers.. 

In terms of independancy... both are platform independant (they say so)... but still they need Java Virtual Machine and the .Net Framework to function...


By Panshul Gupta, Software Engineer, SRM Techsol Pvt. Ltd.  | 05 08 2009 18:21:14 +0000
0
0

.net povides  CAS (code access security) while in java there is role based security. In .net CLR provides this security.


By Sonali Lawale, Graphic/Web Designer, AISSMS IOIT  | 04 20 2009 07:00:29 +0000
2
0

Dear Jonathan,

I apologize if you didn't like the word I used for Java, but I meant that :) I can understand you have worked on Java and you like it. I have worked in a bit detail on languages ranging from Basic/Foxpro/C/C++(Borland, GCC, VC++ with MFC, ATL, WTL)/C#/VB/Java so you could believe a bit of what I say. The things you wrote about are all possible in C#, but the fact you didn't argue with me even after quoting me about was the SPEED/Efficiency - which of course Java can never beat C# in. And about using using cell phones based on Java - I'm forced to use those right now. Wait for phones completely based on C# and .Net framework, and I promise I won't use those slow Java based phones. :)


By Piyush Soni, Software Developer, Tata Consultancy Services (TCS)  | 04 14 2009 04:47:19 +0000
0
0

In this programming era Microsoft .NET provides Component-based software engineering (CBSE)

and I love to write code in c#.

while java is OOP based. Hene, ulimetly C# is a father of Java in terms of performace and security.

 


By Manish Bhandari, Software Developer, Team Computer  | 04 14 2009 04:30:41 +0000
2
0
Java is bullshit. Those who keep on shouting that it is "platform independent" don't know that it is not out of some magic. Your platform independent Java will NOT work if you have not installed JVM for that particular Platform. Just that it is old it is found on those platforms. Same thing applies to .Net. The .Net framework should be installed on the target OS. For those who want to run it on linux and other OS, there are already projects like 'Mono Project' which are quite stable. (others are Portable .Net) .Net is very secure even in its starting years, much easier to program and gives much better performance than that slow compiled but still interpreted Java. I have always seen trouble running those damn slow applets.

There is another benefit : You can really write parts of your software in different languages! So those programmers who are comfortable in VB will write in VB, C# or even Visual C++ ! That's great.

If you want pure performance, use C++ instead. If you want performance + ease of development, use .Net.
Never use Java. :)

By Piyush Soni, Software Developer, Tata Consultancy Services (TCS)  | 03 29 2009 17:15:46 +0000
1
0

I truly agree with the points you made, however both are at there own levels. We cannot compare them at all. If you say java is simple., there is nothing more simpler than .NET i have seen except scripting though. I have been working in .NET for past 5 years and also worked for Jave for 6 months in College and both are good technologies. Regarding saying that .NET allows usage of disk or Network host.., these i think as benefits rather. There are so many cases you want to use the disk. Also, not too familiar about this feature in Jave, but guarantee that if it is not there.. it will come in future...


By Varun Gulati, Team Leader -(Technical), Satyam  | 03 24 2009 17:46:22 +0000
2
0

.net is very easy to do programming, with object oriented.


By shamshuddin , Software Developer, Mobily Telecom  | 02 22 2009 08:57:34 +0000
1
0

Newer Version of .Net is secured, reliable and easy to work


By Abdulhaq Syed Chisty, IS Auditor, Solution Architect  | 02 22 2009 06:01:44 +0000
0
0

.net is very easy to using with sharepoint


By shamshuddin , Software Developer, Mobily Telecom  | 02 09 2009 06:00:42 +0000
0
0

.net is good and easy to learn.


By shamshuddin , Software Developer, Mobily Telecom  | 02 09 2009 05:44:49 +0000
0
0

Dear friends in my opinion java is the best language in terms of security and usage.In java we can make minor to major application for security but in the .net you cannot make much minor application for security it only work for major application.


By arun kumar yadav, Software Developer, ATS Infotech Pvt. Ltd.  | 12 21 2009 07:41:53 +0000
0
0

java


By Ram Manivannan, MCA student, Rajalakshmi engg college  | 08 01 2009 13:56:03 +0000
0
0

That java is not storing the memory address of any variable or object and so any one cannot play with memory in java you can use the reference of object but that reference object is again copy of original object.


By viral modi, Software Developer, Yash Technologies  | 05 12 2009 14:04:20 +0000
1
0

Mr.Viral to make your point clear to all the users can you please elaborate as how  JAVA not supporting pointers is an advantage with respect to its security.


By Radhakrishna Marar, Business Analyst, Oracle  | 05 12 2009 05:46:57 +0000
1
0

In Java also there is CODE ACCESS SECURITY.... While Jsp you can't find any using java code when access the JSP code...


By viral modi, Software Developer, Yash Technologies  | 04 20 2009 07:28:29 +0000
1
1

The main concept is JAVA not support pointer and it is the big advantage as security...


By viral modi, Software Developer, Yash Technologies  | 04 15 2009 09:40:58 +0000
1
1

I am much preferred to say that JAVA is much reliable in terms of programming in security paradigm.  JAVA runs in a multi platform environment(Unix/Linux/Solaris/Windows). If you are serious in getting out of the box, here are the sample topics that i'm aware of in dealing a code and defensive coding style:

  • Ensuring input from multiple sources can be trusted: HTTP Requests, configuration files, backend datastores, command line arguments, environment variables.
  • Validate common data types such as string data as well as uncommon input structures, using Regular Expressions, doValidate() and other tools of Java and J2EE
  • White-list and black-list approaches; tradeoffs.

quote to Piyush Soni

"

Java is bullshit. Those who keep on shouting that it is "platform independent" don't know that it is not out of some magic. Your platform independent Java will NOT work if you have not installed JVM for that particular Platform. Just that it is old it is found on those platforms. Same thing applies to .Net. The .Net framework should be installed on the target OS. For those who want to run it on linux and other OS, there are already projects like 'Mono Project' which are quite stable. (others are Portable .Net) .Net is very secure even in its starting years, much easier to program and gives much better performance than that slow compiled but still interpreted Java. I have always seen trouble running those damn slow applets.

There is another benefit : You can really write parts of your software in different languages! So those programmers who are comfortable in VB will write in VB, C# or even Visual C++ ! That's great.

If you want pure performance, use C++ instead. If you want performance + ease of development, use .Net.
Never use Java. :)"

Moderator, kindly please check words appropriately that is being posted here, and to you my friend, if you don't want to use JAVA anyway, don't use Nokia or any other mobile phones which are capable of JAVA, if you have problems on applets then check out your tuning capability.. not to finalize that JAVA on your own sripulous words :))

By JONATHAN VIRAY, Network Admin/System Admin, OBS  | 03 29 2009 18:30:41 +0000
1
1

Java is ultimate for ever. Programming in Java is cool and very secured. so as usual i support java


By Somesh G, Tech Support Engineer, uel  | 03 17 2009 20:01:55 +0000
1
1

Thank you for your valuable suggestion madam


By kiran kumar reddy, Software Developer, versile it services  | 03 10 2009 03:54:09 +0000
0
0

thank u


By kiran kumar reddy, Software Developer, versile it services  | 03 10 2009 03:53:41 +0000
1
1

I'm with Yuvaraj,its a fact;Skilled/Logical Humanware is vital in every aspect of SDLC.Latter comes development tools


By Abdulhaq Syed Chisty, IS Auditor, Solution Architect  | 02 24 2009 06:53:06 +0000
2
2

I support java .. Power full..


By vijayvkvelu , IT Security Leader, Attomic Labs  | 01 19 2009 14:52:46 +0000
1
1

Really Java is very much popular and it will be ever green if java is there DotNet is there. Therefore

First Java and next DotNet. Generally few knowledge people think that DotNet is great see the OS

it is not platform independent and not secure that java will do it. In my view there is no competition for java beacuse from the early days Microsoft Windows came into existence with Simple GUI and everybody can understand. And if Sun likes to teach java and expand its bussiness microsoft is no where.


By kiran kumar reddy, Software Developer, versile it services  | 10 14 2008 06:41:38 +0000
3
3
I believe that java still reigns supreme as Java platform was introduced in 1995, Java’s security model has evolved to incorporate additional security mechanisms including code signing and increasingly flexible policies.The primary lesson learned from Java’s experience with low-level code safety is from earliest security principles: keep things simple. Java's security model is focused on protecting users from programs downloaded from sources across a network. Java programs run in Java Runtime Environment. Java Programs can't take any action outside those boundaries. For example, Programs are prohibited from many activities, including:* Reading or writing to the local disk,* Making a network connection to any host, except the host from which the applet came etc
By Deepa Sawant, Project Manager, Motorola  | 08 28 2008 20:20:50 +0000
Leading recruitment Firm, Permanent Staffing, Temporary Staffing, Executive Search & Selection, and RPO
  • Create a confidential Career Profile and Resume/C.V. online
  • Get advice for planning their career and for marketing of experience and skills
  • Maximize awareness of and access to the best career opportunities
Viewers also viewed
PHP vs ASP.NET
 
0 referals 10 arguments, 2738 views
communication skills&softskills vs technical skills,programming skills.
 
2460 referals 40 arguments, 775 views
Position Title: Senior Software Engineer (Security)   Job Description: An Engineering degree is...
 
179 referals 1 comments, 21 views
more...  
Recent Knowledge (5)
WE HAD A GOOD NUMBER OF INVENTORS WITH GREATER VISION ABOUT THE SOCIETY. INVENTORS HERE NEED NOT...
 
2 referals 2 arguments, 97 views
These days as I switch on the tv or radio or look at a hoarding I do feel that power of ads I...
 
3004 referals 23 arguments, 482 views
I am associate of prajapati association and i am working for BJP from year 2005 to till date....
 
0 referals 3 arguments, 111 views
more...  
More From Author
We are discussing it on a forum created by Indians.. We can spread it and make it big.. We have it in us..Don't we.. :)
In the age of social networking, instant messages and sms where do e-mails actually stand? Survey says the users in age limit 12-17 have reduced the use of e-mails by 59%!! Even the other age groups have certain percentage decrease in use of...
Every now and then prominent people from west complain that their jobs are getting Bangalored, meaning all the jobs are outsourced to India and Bangalore attracts most number of outsourcing projects in India, first to complain is non other than...
more...