CSC '94 Proceedings of the 22nd annual ACM computer science conference on Scaling up : meeting the challenge of complexity in real-world computing applications: meeting the challenge of complexity in real-world computing applications
The essential CORBA: systems integration using distributed objects
The essential CORBA: systems integration using distributed objects
Corba security: an introduction to safe computing with objects
Corba security: an introduction to safe computing with objects
Security models for web-based applications
Communications of the ACM
A language extension for expressing constraints on data access
Communications of the ACM
Protection in operating systems
Communications of the ACM
The Java Language Specification
The Java Language Specification
Bracket capabilities for distributed systems security
ACSC '02 Proceedings of the twenty-fifth Australasian conference on Computer science - Volume 4
ICSR-6 Proceedings of the 6th International Conerence on Software Reuse: Advances in Software Reusability
Proceedings of the Third International Workshop on Persistent Object Systems
A Two-Level Architecture for Semantic Protection of Persistent Distributed Objects
SMT '00 Proceedings of the International Conference on software Methods and Tools (SMT'00)
The Cambridge CAP computer and its operating system (Operating and programming systems series)
The Cambridge CAP computer and its operating system (Operating and programming systems series)
A case study in access control requirements for a Health Information System
ACSW Frontiers '04 Proceedings of the second workshop on Australasian information security, Data Mining and Web Intelligence, and Software Internationalisation - Volume 32
| Hi-index | 0.00 |
The object-oriented access control in contemporary middleware is inadequate in view of the sensitivity of data stored on the internet and the growing threat from hackers and malicious software. In this paper we present the Opsis system, an architecture for distributed Java applications based on the strict use of 'bracket capabilities'. We describe the concept of 'capability servers' for supporting flexibility and transparency of remote invocation and for allowing the migration of objects. We demonstrate the power and simplicity of the system in an example E-commerce application including the definition of a form of secure electronic cheque.