Sandbox protects access to all system resources Application developers have to write their own SecurityManager to open up the sandbox