Damn, had I had this link...<p><a href="http:&#x2F;&#x2F;lafo.ssw.uni-linz.ac.at&#x2F;papers&#x2F;2015_CGO_Graal.pdf" rel="nofollow">http:&#x2F;&#x2F;lafo.ssw.uni-linz.ac.at&#x2F;papers&#x2F;2015_CGO_Graal.pdf</a><p>...I could&#x27;ve replied immediately. Graal keeps HotSpot VM, presumably libraries too, while replacing the JIT with an extra-aggressive one (semantic risk) coded in Java (lower code-risk). It&#x27;s still bad as it barely addresses platform&#x27;s overall risk. Might make a better, safer JIT for existing platform.<p>The [potentially] better ones are those designed for high-reliability applications such as Aonix&#x27;s PERC and JamaicaVM. They tend to try to do less with more predictability. There was one implemented on Oberon called Jaos JVM. Also, although JVM itself is orthogonal to this, you can run your Java program on JX Operating System for higher security.<p><a href="http:&#x2F;&#x2F;www4.cs.fau.de&#x2F;Projects&#x2F;JX&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www4.cs.fau.de&#x2F;Projects&#x2F;JX&#x2F;</a>