Enhancing Java security with history based access control

Authors:
Fabio Martinelli;Paolo Mori
Affiliations:
Istituto di Informatica e Telematica, Consiglio Nazionale delle Ricerche, Pisa, Italy;Istituto di Informatica e Telematica, Consiglio Nazionale delle Ricerche, Pisa, Italy
Venue:
Foundations of security analysis and design IV
Year:
2007

Citing 32
Cited 2

Proof-carrying code

Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Extensible security architectures for Java

Proceedings of the sixteenth ACM symposium on Operating systems principles
The design and implementation of a certifying compiler

PLDI '98 Proceedings of the ACM SIGPLAN 1998 conference on Programming language design and implementation
Inside Java 2 platform security architecture, API design, and implementation

Inside Java 2 platform security architecture, API design, and implementation
Resource management in Legion

Future Generation Computer Systems - Special issue on metacomputing
SASI enforcement of security policies: a retrospective

Proceedings of the 1999 workshop on New security paradigms
A certifying compiler for Java

PLDI '00 Proceedings of the ACM SIGPLAN 2000 conference on Programming language design and implementation
Communicating sequential processes

Communications of the ACM
Separating access control policy, enforcement, and functionality in extensible systems

ACM Transactions on Computer Systems (TOCS)
ACM SIGAda Ada Letters

ACM SIGAda Ada Letters
Java Virtual Machine Specification

Java Virtual Machine Specification
Java Language Specification, Second Edition: The Java Series

Java Language Specification, Second Edition: The Java Series
STATL: an attack language for state-based intrusion detection

Journal of Computer Security
Analysis of security protocols as open systems

Theoretical Computer Science
Fine-Grain Authorization for Resource Management in the Grid Environment

GRID '02 Proceedings of the Third International Workshop on Grid Computing
Grids and grid technologies for wide-area distributed computing

Software—Practice & Experience
The Globus Project: A Status Report

HCW '98 Proceedings of the Seventh Heterogeneous Computing Workshop
Security for Grid Services

HPDC '03 Proceedings of the 12th IEEE International Symposium on High Performance Distributed Computing
A Logical Language for Expressing Authorizations

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
IRM Enforcement of Java Stack Inspection

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
A new approach to mobile code security

A new approach to mobile code security
The inlined reference monitor approach to security policy enforcement

The inlined reference monitor approach to security policy enforcement
The Jalapeño virtual machine

IBM Systems Journal
Composing security policies with polymer

Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation
The Anatomy of the Grid: Enabling Scalable Virtual Organizations

International Journal of High Performance Computing Applications
Towards Continuous Usage Control on Grid Computational Services

ICAS-ICNS '05 Proceedings of the Joint International Conference on Autonomic and Autonomous Systems and International Conference on Networking and Services
Fine-grained and History-based Access Control with Trust Management for Autonomic Grid Services

ICAS '06 Proceedings of the International Conference on Autonomic and Autonomous Systems
Detecting malicious java code using virtual machine auditing

SSYM'03 Proceedings of the 12th conference on USENIX Security Symposium - Volume 12
The modelling and analysis of security protocols: the csp approach

The modelling and analysis of security protocols: the csp approach
Java™ access control mechanisms

Java™ access control mechanisms
Globus toolkit version 4: software for service-oriented systems

NPC'05 Proceedings of the 2005 IFIP international conference on Network and Parallel Computing
Towards an integrated formal analysis for security and trust

FMOODS'05 Proceedings of the 7th IFIP WG 6.1 international conference on Formal Methods for Open Object-Based Distributed Systems

Run-Time Enforcement of Nonsafety Policies

ACM Transactions on Information and System Security (TISSEC)
An HBAC-based approximation for IBAC programs

Proceedings of the 6th International Conference on Security of Information and Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

Java language has become very popular in the last few years. Due to its portability, Java applications are adopted in distributed environment, where heterogeneous resources cooperate. In this context, security is a fundamental issue, because each resource could execute applications that have been developed by possibly unknown third parties. This paper recalls several solutions for improving the Java native security support. In particular, it discusses an approach for history based access control of Java applications. This paper also describes the application of this solution to two common use cases: grid computing and mobile devices (such as mobile phones or PDAs).