WebApp Sec: Re: secure storage of sensitive data in J2EE

[Richard Moore <rich () westpoint ltd uk>]

Ashish Popli wrote:
> Cant we simply force garbage collection when you are done using the object?
> Here is a link.
> http://java.sun.com/docs/books/tutorial/essential/system/garbage.html
Unfortunately, AFAIK this doesn't guarantee that all objects that
could possibly be collected /will/ be collected. To check the
behaviour for your JVM/app you can use the -verbose:gc of the java
binary. It's also worth checking if you are using flags like
-Xnoclassgc too.

Cheers

Rich.
--
Richard Moore, Principle Software Engineer,
Westpoint Ltd,
Albion Wharf, 19 Albion Street, Manchester, M1 5LN, England
Tel: +44 161 237 1028
Fax: +44 161 237 1031