Three levels
- Low Level Security(virtual Machine Security)
- Apps follow Java Semantics
- Ill formed code does not crash JVM
- App Level Security
- Code can only access features and functions it is allowed to
- End To End Security
- Transactions initiated on device protected(Out of CLDC scope)