Loading...
Please wait, while we are loading the content...
Similar Documents
Using Reflection as a Mechanism for Enforcing Security Policies on Compiled Code (2000)
| Content Provider | CiteSeerX |
|---|---|
| Author | Welch, Ian Stroud, Robert J. |
| Abstract | Abstract Several authors have proposed using code modification as a technique for enforcing security policies such as resource limits, access controls, and network information flows. However, these approaches are typically ad hoc and are implemented without a high level abstract framework for code modification. We propose using reflection as a mechanism for implementing code modifications within an abstract framework based on the semantics of the underlying programming language. We have developed a reflective version of Java called Kava that uses byte-code rewriting techniques to insert pre-defined hooks into Java class files at load time. This makes it possible to specify and implement security policies for mobile code in a more abstract and flexible way. Our mechanism could be used as a more principled way of enforcing some of the existing security policies described in the literature. The advantages of our approach over related work (SASI, JRes, etc.) are that we can guarantee that our security mechanisms cannot be bypassed, a property we call strong non-bypassability, and that our approach provides the high level abstractions needed to build useful security policies. |
| File Format | |
| Volume Number | 10 |
| Journal | Journal of Computer Security |
| Language | English |
| Publisher Date | 2000-01-01 |
| Access Restriction | Open |
| Subject Keyword | Enforcing Security Policy Compiled Code Security Policy Code Modification Access Control Abstract Several Author Useful Security Policy High Level Abstraction Related Work Principled Way Network Information Flexible Way Abstract Framework Ad Hoc Mobile Code Programming Language Strong Non-bypassability High Level Abstract Framework Reflective Version Pre-defined Hook Java Class File Resource Limit Load Time Security Mechanism Cannot |
| Content Type | Text |
| Resource Type | Article |
