Details
-
Enhancement
-
Resolution: Unresolved
-
P4
-
None
-
None
-
generic
-
generic
Description
ADDITIONAL SYSTEM INFORMATION :
This will impact the JVM implementation across platforms and versions (from the time implemented, if or once implemented).
A DESCRIPTION OF THE PROBLEM :
For applications that are processing personally identifiable information(PCIDSS, HIPAA), it may be necessary to obtain a heap-dump of the JVM but the resulting data may contain sensitive data that may require it to be processed in a secure environment. Encrypting heap-dump potentially provides a way to manage security with troubleshooting requirements. Note - Other use-cases may include data generated using "javax.net.debug=all" system-property.
As such request is to implement a feature to encrypt the heap-dump generated using a pre-configured PGP/RSA Public-key or equivalent.
This will impact the JVM implementation across platforms and versions (from the time implemented, if or once implemented).
A DESCRIPTION OF THE PROBLEM :
For applications that are processing personally identifiable information(PCIDSS, HIPAA), it may be necessary to obtain a heap-dump of the JVM but the resulting data may contain sensitive data that may require it to be processed in a secure environment. Encrypting heap-dump potentially provides a way to manage security with troubleshooting requirements. Note - Other use-cases may include data generated using "javax.net.debug=all" system-property.
As such request is to implement a feature to encrypt the heap-dump generated using a pre-configured PGP/RSA Public-key or equivalent.