evaluation question: how do you handle Java?

I am trying to improve my approach to Java and could use some practical advice.

I am particularly interested in evaluation and security. I would like to compare approaches that people have actually used rather than just theoretical suggestions.

What has worked best for you, and what would you avoid?