Java's security problems unlikely to be resolved soon, researchers say