Distributed component software security issues on deploying a secure electronic marketplace

Library Computing

Volumn 19, Issue 3-4, 2000, Pages 212-221

  Gritzalis, Stefanos ^a   Iliadis, John ^b   Oikonomopoulos, Spyros ^a  

^a ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

^b UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Computer architectures; Computer software; Distributed data processing; Electronic funds transfer; Security

Indexed keywords

EID: 1642287672     PISSN: 15271161     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (25)

1. Balfanz, D. and Gong, L. (1997), "Secure multi-processing in Java", available at 〈http://www-Swiss.ai.mit.edu/ ∼jbank/javapaper/javapaper.html〉
2. Concalves, M. (1998), Windows NT 4.0 Server Security Guide, Prentice-Hall, Englewood Cliffs, NJ.
3. CORBA (1998a), Common Object Services Specification, available at 〈ftp://ftp.omg.org/pub/docs/formal/98-07-05.pd〉
4. CORBA (1998b), Internet Inter-ORB Protocol v2.2, available at 〈ftp://ftp.omg.org/pub/docs/formal/98-07-01.pdf〉
5. CORBA (1998c), Security Services Specification, available at 〈ftp://ftp.omg.org/pub/docs/ptc/98-01-02.pdf〉
6. Dulepet, R. (1998), "COM security in practice" Microsoft Developer's Network Library, available at 〈http:// premium.microsoft.com/msdn/library/techart/ msdn_practicom.htm〉
7. Freier, A., Karlton, P. and Kocher, P. (1996), SSL specification, available at 〈http://home.netscape.com/ newsref/std/SSL.html〉
8. Gollmann, D. (1999), Computer Security, John Wiley & Sons, New York, NY.
9. Gong, L. (1997), "New security architectural directions for Java", Proceedings of IEEE COMPCON.
10. Gong, L., Mueller, M., Prafullchandra, H. and Schemers, R. (1997), "Going beyond the sandbox: an overview of the new security architecture in the Java Development Kit 1.2", Proceedings of the USENIX Symposium on Internet Technologies.
11. Gorrieri, R. and Marchetti, R. (1998), "Applet watch-dog: a monitor controlling the execution of Java applets", Proceedings of the IFIP SEC'98, Austrian Computer Society, pp. 15-23.
12. Gritzalis, D. and Katsikas, S. (1996), "Towards a formal system-to-system authentication protocol", Computer Communications, Vol. 19, Elsevier, pp. 954-61.
13. Horstmann, M. and Kirtland, M. (1997), "DCOM Architecture", Microsoft Developer's Network Library, available at 〈http://www.microsoft.com/windows/ downloads/bin/nts/dcom_architecture.exe〉
14. Iona Information (1998), Orbix Home found at 〈http:// www.iona.com/info/orbixhome.html〉
15. Java Security (1998), available at 〈http://www-swiss.ai.mit.edu/∼jbank/javapaper/javapaper.html〉
16. Microsoft Corp. (1996), "DCOM Technical Overview", available at 〈http://www. microsoft.com/windows/downloads/bin/nts/ dcomtec.exe〉
17. Object Management Group (OMG) (1999), available at 〈http://www.omg.org〉
18. RMI Specification (1997a), available at 〈http:// www.javasoft.com/products/jdk/1.1/docs/guide/rmi/ spec/rmiTOC.doc.html〉
19. RMI Tutorial (1997b), available at 〈http:// www.javasoft.com/docs/books/tutorial/rmi/ index.html〉
20. Rogerson, D. (1997), Inside COM, Microsoft Press, Redwood, WA.
21. Spinellis, D., Kokolakis, S. and Gritzalis, S. (1999), "Security requirements, risks, and recommendations for small enterprise and home-office environments", Information Management and Computer Security, Vol. 7 No. 3, pp. 121-8.
22. Staamann, S. (1997), "Overall integrity of service control in TINA networks", Proceedings of the CMS'97 3rd IFIP TC6/TC11 International Joint Working Conference on Communications and Multimedia Security, Chapman & Hall, London, pp. 3-15.
23. Staamann, S., Buttyan, L. and Wilhelm, U. (1998), "Security in TINA", Proceedings of the 14th IFIPSEC '98 International Information Security Conference, published by Austrian Computer Society, pp. 111-22.
24. Sun Microsystems (1997), Frequently Asked Questions - Applet Security, available at 〈http://java.sun.com/ sfaq/〉
25. Yellin, F. (1995), Low Level Security in Java, available at 〈http://java.sun.com/sfaq/verifier.html〉