Secure
assumes nothing can be trusted
based on public key encription & language design
memory references resolved by interpreter, programmer cannot know memory layout
Java run time system verifies that downloaded code over network does not violate restrictions
remote loaded classes kept separate from local classes to prevent version replacement
guarentees virus free, yet aimed at middle ground between tight security and complete paranoia