EricGregMiller avatar image
EricGregMiller asked Spirent_Admin answered

Zero Day, Java Vulnerabilities, and iTest

What is the risk of Java vulnerabilities, especially Zero Day type vulnerabilities, to an organization running iTest?
10 |950

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

Spirent_Admin avatar image
Spirent_Admin answered
The Java Zero Day threat has been well publicized recently. In addition, there is general discussion of threats that exploit Java vulnerabilities and how to guard against them. Since iTest is built on Java we realize some customers may be concerned about the security of their networks while running iTest. We want to assure you there is no need for concern. There are two platforms on which Java runs. - In a browser as a web plugin. - On a local machine or device, using an installed Java Virtual Machine (JVM). Zero Day and other threats exploit vulnerabilities in the Java plugin for browsers. This Java plugin runs inside a web browser like Internet Explorer, Firefox, or Chrome. Thus any web browser that enables Java is vulnerable. To protect against these threats and remove Java vulnerabilities you can disable Java in your browsers. The downside to disabling Java in your browsers is that any Java app that is web-based will not work. Because of this you will not be able to use any web-based apps and some websites you visit might not work correctly. The other way to be relatively safe is to make sure you stay up-to-date with latest Java security fixes. This probably happens automatically, but how it works depends on your specific browser and configuration. This, of course, is not as safe as disabling Java but it allows you to work with web-based Java apps. Fortunately, none of the above concerns apply to the second kind of Java app, the kind that runs on a local machine. iTest is that second kind of app. It uses the locally installed JVM which means none of the issues mentioned above apply. In other words, apps that run locally, like iTest, are not subject to Zero Day or other threats. This means you can safely run iTest without any worries. Furthermore, if you secure against threats by disabling Java in your browsers, iTest and other local Java apps will continue to function normally. We hope this helps with questions you may have. Feel free to comment and use this as a place to ask further questions about Zero Day or other threat and vulnerability issues you think might affect iTest. Regards, Eric
10 |950

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.