Saving the world from bad beans: Deployment-time confinement checking

ACM SIGPLAN Notices

Volumn 38, Issue 11, 2003, Pages 374-387

  Clarke, Dave ^a   Richmond, Michael ^b   Noble, James ^c  

^a UTRECHT UNIVERSITY   (Netherlands)

^b IBM ALMADEN RESEARCH CENTER   (United States)

^c VICTORIA UNIVERSITY OF WELLINGTON   (New Zealand)

Author keywords

Confinement; Deployment tools; Enterprise JavaBeans

Indexed keywords

COMPUTER ARCHITECTURE; COMPUTER SOFTWARE SELECTION AND EVALUATION; OBJECT ORIENTED PROGRAMMING; PROGRAM ASSEMBLERS; SERVERS; USER INTERFACES;

DEPLOYMENT-TIME CONFINEMENT CHECKING; ENTERPRISE JAVABEANS; VERIFICATION;

JAVA PROGRAMMING LANGUAGE;

EID: 1442313098     PISSN: 03621340     EISSN: None     Source Type: Journal    
DOI: 10.1145/949343.949339     Document Type: Conference Paper

References (48)

1. J. Aldrich, V. Kostadinov, and C. Chambers. Alias annotations for program understanding. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications, pages 311-330. ACM Press, 2002.
2. P. S. Almeida. Balloon Types: Controlling sharing of state in data types. In European Conference on Object-Oriented Programming, June 1997.
3. D. Ancona and E. Zucca. True modules for Java classes. In European Conference on Object-Oriented Programming, June 2001.
4. A. Banerjee and D. A. Naumann, Ownership confinement ensures representation independence in object-oriented languages. Submitted for publication, December 2002.
5. A. Banerjee and D. A. Naumann. Representation independence, confinement, and access control. In ACM Symposium on Principles of Programming Languages, Portland, Oregon, January 2002.
6. L. Bauer, A. W. Appel, and E. W. Felten. Mechanisms for secure modular programming in Java. Software - Practice and Experience, 2003.
7. B. Blanchet. Escape analysis for object-oriented languages: Application to Java. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications. ACM Press, October 1999.
8. C. Boyapati, R. Lee, and M. Rinard. Ownership types for safe programming: preventing data races and deadlocks. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications, pages 211-230. ACM Press, 2002.
9. C. Boyapati and M. Rinard. A parameterized type system for race-free Java programs. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications, pages 56-69. ACM Press, 2001.
10. C. Boyapati, A. Salcianu, W. Beebee, and M. Rinard. Ownership types for safe region-based memory management in real-time Java. In ACM Conference on Programming Language Design and Implementation (PLDI), pages 118-125, San Diego, California, June 2003.
11. J. Boyland, J. Noble, and W. Retert. Capabilities for Sharing: A Generalization of Uniqueness and Real-Only. In European Conference on Object-Oriented Programming, June 2001.
12. D. Clarke. Object Ownership and Containment. PhD thesis, University of New South Wales, 2001.
13. D. Clarke and S. Drossopoulou. Ownership, encapsulation and the disjointness of type and effect. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications, pages 292-310. ACM Press, 2002.
14. D. Clarke, J. M. Fox, J. Noble, and J. Vitek. Scopedjava: Ownership for real-time Java. Under revision, Nov. 2002.
15. D. Clarke and T. Wrigstad. External uniqueness is unique enough. In European Conference on Object-Oriented Programming, July 2003.
16. D. G. Clarke, J. M. Potter, and J. Noble. Ownership types for flexible alias protection. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications, pages 48-64. ACM Press, October 1998.
17. C. Colby, P. Lee, G. C. Necula, F. Blau, M. Plesko, and K. Cline. A certifying compiler for Java. PLDI 2000. ACM SIGPLAN Notices, 35(5):95-107, 2000.
18. E. Gamma, R. Helm, R. Johnson, and J. Vlissides. Design Patterns: Elements of Reusable Object-Oriented Software. Addison-Wesley, January 1995.
19. C. Grothoff, J. Palsberg, and J. Vitek. Encapsulating objects with confined types. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications, pages 241-255. ACM Press, 2001.
20. J. Hogg. Islands: Aliasing protection in object-oriented languages. In ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages and Applications, pages 271-285. ACM Press, 1991.
21. J. Hogg, D. Lea, A. Wills, D. de Champeaux, and R. Holt. The Geneva convention on the treatment of object aliasing. OOPS Messenger, 3(2), April 1992.
22. IBM. WebSphere end-to-end benchmark and performance sample application: Trade 3. http://www-3.ibm.com/software/webservers/appserv/benchmark3.html.
23. A. Igarashi B. C. Pierce, and P. Wadler. A recipe for raw types. In Foundations of Object-oriented Programming (FOOL8), London, January 2001.
24. N. Kassem and the Enterprise Team. Designing Enterprise Applications with the Java™ Platform, Enterprise Edition. Addison-Wesley, June 2000.
25. B. Kernighan and D. Ritchie, The C Programming Language. Prentice-Hall, March 1988.
26. B. W. Lampson. A note on the confinement problem. Communications of the ACM, 16(10):613-615, October 1973.
27. X. Leroy and F. Rouaix. Security properties of typed applets. In Secure Internet Programming, volume 1603 of Lecture Notes in Computer Science. Springer, 1999. Also appears in 25th ACM Conference on Principles of Programming Languages, 1998.
28. J. L. Lujo Bauer and D. Walker. Types and effects for non-interfering runtime monitors. In International Symposium on Software Security, November 2002.
29. F. Marinescu. EJB Design Patterns. John Wiley, February 2002.
30. Java Community Process. Application Isolation API Specification, 2003. http://jcp.org/jsr/detail/121.jsp
31. JBoss Group. JBoss Application Server. http://ww.jboss.org.
32. G. McGraw and E. Felten. Securing Java. John Wiley and Sons, January 1999.
33. P. Müller and A. Poetzsch-Heffter. Universes: A type system for controlling representation exposure. In A. Poetzsch-Heffter and J. Meyer, editors, Programming Languages and Fundamentals of Programming. Fernuniversität Hagen, 1999.
34. G. C. Necula. Proof-carrying code. In Proceedings of the 24th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pages 106-119. ACM Press, 1997.
35. J. Noble, J. Vitek, and J. Potter. Flexible alias protection. In E. Jul, editor, European Conference on Object-Oriented Programming, volume 1445 of Lecture Notes In Computer Science, pages 158-185, Berlin, Heidelberg, New York, July 1988. Springer-Verlag.
36. Oracle Corporation. Oracle9i Application Server, September 2002.
37. A. Potanin. The Fox - a tool for object graph analysis, 2002. Honours Report, Computer Science, Victoria University of Wellington, New Zealand.
38. M. Richmond. Flexible Migration Support for Component Frameworks. PhD thesis, Macquarie University, Sydney, Australia, 2003.
39. M. Richmond and J. Noble. Reflections on remote reflection. In Proceedings of the 24th Australasian Computer Science Conference (ACSC-01), volume 23.1 of Australian Computer Science Communications, pages 163-170. IEEE Computer Society, January 2001.
40. A. Rudys and D. S. Wallach. Enforcing Java run-time properties using bytecode rewriting. In International Symposium on Software Security, November 2002.
41. M. Shapiro. Structure and encapsulation in distributed systems: the Proxy Principle. In Proc. 6th Intl. Conf. on Distributed Computing Systems, pages 198-204, IEEE, May 1986.
42. Sun Microsystems. Java 2 Enterprise Edition Reference Implementation. http://java.sun.com/j2ee/.
43. Sun Microsystems. Java Pet Store Sample Application. http://java.sun.com/blueprints/code/.
44. Sun Microsystems. Java™ Remote Method Invocation Specification revision 1.8.
45. Sun Microsystems. Enterprise JavaBeans Specification version 2.3, Aug 2002.
46. C. Szyperski. Component Software: Beyond Object-Oriented Programming. Addison-Wesley Longman, Harlow, Essex, 1997.
47. R. Vallée-Rai, L. Hendren, V. Sundaresan, P. Lam, E. Gagnon, and P. Co. SOOT - A Java Optimization Framework. In Proceedings of CASCON 1999, pages 125-135, November 1999.
48. J. Vitek and B. Bokowski. Confined types in Java. Software Practice and Experience, 31(6):507-532, 2001.