Distributed component software security issues on deploying a secure electronic marketplace

Information Management and Computer Security

Volumn 8, Issue 1, 2000, Pages 5-13

  Gritzalis, Stefanos ^a   Iliadis, John ^b   Oikonomopoulos, Spyros ^c  

^a UNIVERSITY OF WEST ATTICA   (Greece)

^b UNIVERSITY OF THE AEGEAN   (Greece)

^c ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

Author keywords

[No Author keywords available]

Indexed keywords

CLIENT SERVER COMPUTER SYSTEMS; COMPUTER ARCHITECTURE; COMPUTER SOFTWARE REUSABILITY; ELECTRONIC COMMERCE; OBJECT ORIENTED PROGRAMMING; REAL TIME SYSTEMS;

DISTRIBUTED COMPONENT SOFTWARE (DCS); ELECTRONIC MARKETPLACE;

SECURITY OF DATA;

EID: 0033717626     PISSN: 09685227     EISSN: None     Source Type: Journal    
DOI: 10.1108/09685220010312290     Document Type: Article

References (25)

1. Balfanz, D. and Gong, L. (1997), "Secure multiprocessing in Java", available at
2. Concalves, M. (1998), Windows NT 4.0 Server Security Guide, Prentice-Hall, Englewood Cliffs, NJ.
3. CORBA (1998a), Common Object Services Specification, available at
4. CORBA (1998b), Internet Inter-ORB Protocol v2.2, available at
5. CORBA (1998c), Security Services Specification, available at
6. Dulepet, R. (1998), "COM security in practice" Microsoft Developer's Network Library, available at
7. Freier, A., Karlton, P. and Kocher, P. (1996). SSL specification, available at
8. Gollmann D. (1999), Computer Security, John Wiley & Sons, New York, NY.
9. Gong L. (1997), "New security architectural directions for Java", Proceedings of IEEE COMPCON.
10. Gong, L., Mueller, M., Prafullchandra, H. and Schemers, R. (1997), "Going beyond the sandbox: an overview of the new security architecture in the Java Development Kit 1.2", Proceedings of the USENIX Symposium on Internet Technologies.
11. Gorrieri, R. and Marchetti, R. (1998), "Applet watch-dog: a monitor controlling the execution of Java applets", Proceedings of the IFIP SEC'98, Austrian Computer Society, pp. 15-23.
12. Gritzalis, D. and Katsikas, S. (1996), "Towards a formal system-to-system authentication protocol", Computer Communications, Vol. 19, Elsevier, pp. 954-61.
13. Horstmann, M. and Kirtland, M. (1997), "DCOM Architecture", Microsoft Developer's Network Library, available at
14. Iona Information (1998), Orbix Home found at
15. Java Security (1998), available at
16. Microsoft Corp. (1996), "DCOM Technical Overview", available at
17. Object Management Group (OMG) (1999), available at
18. RMI Specification (1997a), available at
19. RMI Tutorial (1997b), available at
20. Rogerson, D. (1997), Inside COM, Microsoft Press, Redwood, WA.
21. Spinellis, D., Kokolakis, S. and Gritzalis S. (1999), "Security requirements, risks, and recommendations for small enterprise and home-office environments", Information Management and Computer Security, Vol. 7 No. 3, pp. 121-8.
22. Staamann S. (1997), "Overall integrity of service control in TINA networks", Proceedings of the CMS'97 3rd IFIP TC6/TC11 International Joint Working Conference on Communications and Multimedia Security, Chapman & Hall, London, pp. 3-15.
23. Staamann, S., Buttyan, L. and Wilhelm U. (1998), "Security in TINA", Proceedings of the 14th IFIPSEC '98 International Information Security Conference, published by Austrian Computer Society, pp. 111-22.
24. Sun Microsystems (1997), Frequently Asked Questions - Applet Security, available at
25. Yellin, F. (1995), Low Level Security in Java, available at