Method-Specific Java Access Control via RMI Proxy Objects Using Annotations

Authors:
Jeff Zarnett;Patrick Lam;Mahesh Tripunitara
Affiliations:
University of Waterloo, Waterloo, Canada;University of Waterloo, Waterloo, Canada;University of Waterloo, Waterloo, Canada
Venue:
ICISS '09 Proceedings of the 5th International Conference on Information Systems Security
Year:
2009

Citing 6
Cited 0

An approach to safe object sharing

OOPSLA '00 Proceedings of the 15th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
SAFKASI: a security mechanism for language-based systems

ACM Transactions on Software Engineering and Methodology (TOSEM)
Reflections on remote reflection

ACSC '01 Proceedings of the 24th Australasian conference on Computer science
Stack inspection: Theory and variants

ACM Transactions on Programming Languages and Systems (TOPLAS)
Providing Fine-grained Access Control for Java Programs

ECOOP '99 Proceedings of the 13th European Conference on Object-Oriented Programming
Logic in Computer Science: Modelling and Reasoning about Systems

Logic in Computer Science: Modelling and Reasoning about Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

We propose a novel approach for granting to remote clients partial access on arbitrary objects at the granularity of methods. The applications that we target use Remote Method Invocation (RMI). We automatically build proxy objects, and give them to untrusted clients instead of the originals. Proxy objects expose a subset of methods to prevent potentially dangerous calls from clients. We present the system's semantics, implementation, and its evaluation. Creating a proxy takes an order of magnitude less time than the corresponding RMI lookup.