Reusable components for developing security-aware applications

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2002-January, Issue , 2002, Pages 239-248

  Probst, Stefan ^a   Essmayr, Wolfgang ^a   Weippl, Edgar ^a  

^a SOFTWARE COMPETENCE CENTER HAGENBERG   (Austria)

Author keywords

Access control; Application software; Authentication; Authorization; Computer architecture; Connectors; Cryptography; Data security; Software reusability; Wheels

Indexed keywords

ACCESS CONTROL; APPLICATION PROGRAMS; AUTHENTICATION; COMPUTER ARCHITECTURE; CONNECTORS (STRUCTURAL); CRYPTOGRAPHY; REUSABILITY; SECURITY OF DATA; SECURITY SYSTEMS; WHEELS;

ACCESS CONTROL MODELS; APPLICATION DEVELOPERS; APPLICATION SPECIFIC; AUDITING MECHANISM; AUTHORIZATION; MAINFRAME COMPUTING; MULTI-TIER APPLICATIONS; REUSABLE COMPONENTS;

COMPUTER SOFTWARE REUSABILITY;

EID: 33846200596     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2002.1176295     Document Type: Conference Paper

References (13)

1. J.E. Dobson and B. Randell B, "Building Reliable Secure Computing Systems out of Unreliable Insecure Components", Proc. 17th Annual Computer Security Applications Conference (ACSAC), New Orleans, Louisiana, USA., Dec. 10th-14th, 2001
2. M. Carey, H. Garcia-Molina, J. Hamilton, H. Pirahesh, and B. Thuraisingham, "Where are Our Promising Research Directions: Database Server, Middleware, or Applications?", Panel Discussion: Proc. 18th Int. IEEE Conf. on Data Engineering (ICDE), San Jose, CA, USA, Feb. 26th-March 1st, 2002
3. W. Essmayr, S. Probst, and E. Weippl, "Role-based Access Controls: Status, Dissemination, and Prospects for Generic Security Mechanisms", to appear: Int. Journal of Electronic Commerce Research, Kluwer Academic Publishers
4. W. Essmayr, S. Probst, and E. Weippl, "A Comparison of Distributed Authorization Solutions", Proc. 3rd Int. Conference on Information Integration and Web-based Applications & Services (IIWAS), Linz, Austria, Sep. 10th-12th, 2001
5. P. Ashley, and M. Vandequauver, "Intranet Security-The SESAME Approach", Kluwer Academic Publishing, 1998
6. M.E. Zurko, R. Simon, and T. Sanfilippo, "A User-Centered, Modular Authorization Service Built on an RBAC Foundation", Proc. IEEE Symposium on Security and Privacy, Berkley, CA, USA, May 1999
7. M. Hauswirth, C. Kerer, and R. Kurmanowytsch, "A flexible and extensible security framework for Java code", Proc. 9th International World Wide Web Conference, Amsterdam, May 2000
8. I. Welch, and R. Stroud, "Supporting Real World Security Models in Java", Proc. 7th IEEE Workshop on Future Trends in Distributed Computing Systems, Tunisia, South Africa, December 1999
9. Sun Microsystems, "Java Security Architecture", http://java.sun.com/j2se/1.4/docs/guide/security/spec/securityspecTOC.fm.html (last accessed on May 31, 2002)
10. E. Jendrock, S. Bodoff, D. Green, K. Haase, M. Pawlan, and B. Stearns, The J2EE Tutorial, ISBN 0-201-79168-4, Addison Wesley, 2002
11. Foundstone Inc., CORE Security Technologies, "Security in the Microsoft® .NET Framework", http://www.foundstone.com/pdf/dotnet-security-framework.pdf (last accessed on May 31, 2002)
12. R. Sandhu, D. Ferraiolo, and R. Kuhn, "The NIST Model for Role-Based Access Control: Towards A Unified Standard", Proc. 5th ACM Workshop on Role-Based Access Control, July 2000
13. E. Gamma, R. Helm, R. Johnson, and J. Vlissides, Design Patterns, ISBN 0-201-63361-2, Addison-Wesley, 1995