You may override the Network Server's default installation of a security manager if, for some reason, you need to run your application outside of the Java security protections.
Use the -noSecurityManager option to force the Network Server to come up without a security manager. For example:
java org.apache.derby.drda.NetworkServerControl start \ -h localhost -noSecurityManager