Using reflection as a mechanism for enforcing security policies in mobile code

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 1895, Issue , 2000, Pages 309-323

  Welch, Ian ^a   Stroud, Robert J ^a  

^a NEWCASTLE UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); JAVA PROGRAMMING LANGUAGE; SECURITY SYSTEMS; SEMANTICS;

ABSTRACT FRAMEWORK; ACCESS NETWORK; BYTECODES; CODE MODIFICATIONS; CODE REWRITING; CONTROL INFORMATION; JAVA CLASS FILES; MOBILE CODES; NETWORK INFORMATION FLOW; SECURITY POLICY;

ACCESS CONTROL;

EID: 84881380158     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/10722599_19     Document Type: Conference Paper

References (19)

1. Cohen, G. A., and Chase, J. S.: Automatic Program Transformation with JOIE. Proceedings of USENIX Annual Technical Symposium 1998
2. Czajkowsik, G., von Eicken, T., JRes: A Resource Accounting Interface for Java, ACM OOPSLA Conference, October 1998.
3. Dahm, M.: Bytecode Engineering, Java Informations Tage 1999
4. Erlingsson, U., Schneider, F.: SASI Enforcement of Security Policies: A Retrospective. Proceedings New Security Paradigms Workshop, 1999
5. Evans, D., Twyman, A.: Flexible Policy-Directed Code Safety. IEEE Security and Privacy, Oakland, CA., May 9-12, 1999
6. Florio, M.F., Gorrieri, R., Marchetti, G.: Coping with Denial of Service due to Malicious Java Applets. Computer Communications Journal, August 2000
7. Fraser, T., Badger, L., Feldman, M.: Hardening COTS Software with Generic Software Wrappers. IEEE Security and Privacy, Oakland, CA., May 9-12, 1999
8. Gong, L.: Inside Java(TM) 2 Platform Security. Addison-Wesley, 1999
9. Gosling, J., Frank Yellin, and the Java Team, "Java API Documentation Version 1.0.2", Sun Microsystems, Inc., 1996
10. Gosling, J., Joy, B., Steele, G. L.: The Java Language Specification, The Java Series, Addison-Wesley, 1996
11. Kiczales G., des Rivieres J.: The Art of the Metaobject Protocol. MIT Press, 1991.
12. Maes, P.: Concepts and experiments in computational reflection, OOPSLA, 1987
13. Pandey, R., Hashii, B., Providing Fine-Grained Access Control for mobile programs through binary editing, Technical Report TR98-08, University of California, Davis, August 1998
14. Java Team, JDK 1.1.8 Documentation", Sun Microsystems, Inc., 1996-1999
15. Java Team, Java 2 SDK Documentation", Sun Microsystems, Inc., 1996-1999
16. Java Security Team, "Java Authentication and Authorization Service", Sun Microsystems, Inc., http://java.sun.com/security/jaas/index.html, 1999
17. Welch, I.: Reflective Enforcement of the Clark-Wilson Integrity Model, 2nd Workshop on Distributed Object Security, OOPSLA, 1999.
18. Welch, I., Stroud, R. J.: Supporting Real World Security Models in Java. Proceedings of 7th IEEE International Workshop on Future Treads of Distributed Computing Systems, Cape Town, South Africa, December 20-22, 1999
19. Welch, I., Stroud, R. J.: Kava: A Reflective Java based on Bytecode Rewriting. Springer-Verlag Lecture Notes in Computer Science LNCS 1826, 2000