Common security API and framework for application and applet developers Fine-grained access control Well-defined access control mechanism Concrete SecurityManager Option to treat local applications and applets consistently