Policy-driven reflective enforcement of security policies

Proceedings of the ACM Symposium on Applied Computing

Volumn 2, Issue , 2006, Pages 1580-1584

  Welch, Ian ^a   Fan, Lu ^a  

^a VICTORIA UNIVERSITY OF WELLINGTON   (New Zealand)

Author keywords

Reflection; Security policies

Indexed keywords

CODES (SYMBOLS); JAVA PROGRAMMING LANGUAGE; NETWORK PROTOCOLS; SOFTWARE PROTOTYPING;

FUNCTIONAL CODES; METAOBJECT PROTOCOLS; POLICY-DRIVEN REFLECTIVE ENFORCEMENT; SECURITY POLICIES;

SECURITY OF DATA;

EID: 33751029574     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1141277.1141645     Document Type: Conference Paper

References (11)

1. C. A., R. Montanari, E. Lupu, M. Sloman, and C. Stefanelli. A flexible access control service for Java mobile code. In Annual Computer Security Applications Conference, pages 356-365, New Orleans, Louisiana, USA, 2000. IEEE.
2. N. Damianou, N. Dulay, E. Lupu, and M. Sloman. The ponder policy specification language. In POLICY '01: Proceedings of the International Workshop on Policies for Distributed Systems and Networks, pages 18-38, London, UK, 2001. Springer-Verlag.
3. D. Evans and A. Twyman. Flexible policy-directed code safety. In IEEE Symposium on Research in Security and Privacy, pages 32-45, Oakland, CA, May 1999. IEEE Computer Society, Technical Committee on Security and Privacy, IEEE Computer Society Press.
4. L. Gong, M. Mueller, H. Prafullchandra, and S. R. Going beyond the sandbox: An overview of the new security architecture in the Java Development Kit 1.2. In USENIX Symposium on Internet Technologies and Systems, pages 103-112, Monterey, California, December 1997. USENIX, Berkeley, CA.
5. J. Gosling, B. Joy, and G. L. Steele. The Java Language Specification. The Java Series. Addison-Wesley, 1996.
6. G. Kiczales, E. Hilsdale, J. Hugunin, M. Kersten, J. Palm, and W. G. Griswold. An Overview of AspectJ. In ECOOP 2001, volume LNCS 2072, pages 327-353, Budapest, Hungary, 2001. Springer.
7. H. T., K. S., Y. W., and C. Robbins. The string representation of standard attribute syntaxes. Internet Engineering Task Force. Available from: http://www.ietf.org/rfc7rfc1778.txt, Mar 1995. [Accessed February 2003].
8. J. von Nieda. Lirc - an IRC client for Java. http://www.vonnieda.org/ Lirc, 2001. Last accessed 17/6/02.
9. I. Welch and R. Stroud. Re-engineering security as a crosscutting concern - experience with a third party application. The Computer Journal, 46(5):578-589, September 2003.
10. I. Welch and R. J. Stroud. Kava - using byte-code rewriting to add behavioral reflection to Java. In Proceedings of COOTS 2001, USENIX Conference on Object-Oriented Technologies and Systems, pages 119-130, San Antonio, Texas, 29 January - 2 February 2001. USENIX, Berkeley, CA.
11. I. Welch and R. J. Stroud. Using reflection as a mechanism for enforcing security policies on compiled code. Journal of Computer Security, 10:399-432, 2002.