To meet with the ever-increasing needs of largescale multimedia applications, a streaming media system has to be both secure and scalable. Conventional P2P technology used in streaming media could solve the problem of scalability and bandwidth bottleneck of traditional C/S architecture but still have problems in handling security for losing central manageability and robustness. Therefore, to handle security and scalability issues as a whole, in this paper we present a novel secure and scalable streaming media scheme in a central-controlled P2P framework. By firstly adopting 3D-wavelet coding in P2P streaming, we encode the raw data into different layers and separate security management from data transmission by transmitting the layer with most priority in C/S network to guarantee quality and conduct security management while transmitting the lower priority content layers in the pure P2P network to promote scalability .In our implementation, we specify the 3D-wavelet coding for P2P streaming, and design our handshaking and streaming process, loadbalancing gossip-based management protocol for P2P peers. Our experimental results demonstrate our scalable framework exceed C/S streaming and meanwhile achieve better security with accepted encoding/decoding overheads over pure P2P media streaming.