Taming access control security: extending capabilities using the views relationship

  • Authors:
  • Marcus E. Markiewicz;Carlos J. P. Lucena;Donald D. Cowan

  • Affiliations:
  • Laboratório de Engenharia de Software (LES), Departmento de Informática, Pontifícia Universidade Católica, Rio de Janeiro 22460, RJ, Brazil;Laboratório de Engenharia de Software (LES), Departmento de Informática, Pontifícia Universidade Católica, Rio de Janeiro 22460, RJ, Brazil;Computer Science Department and Computer Systems Group, University of Waterloo, Waterloo, Ontario, Canada

  • Venue:
  • Software—Practice & Experience
  • Year:
  • 2002

Quantified Score

Hi-index 0.01

Visualization

Abstract

The 'views' relationship indicates how an object-oriented design can be clearly separated into objects and their corresponding interface. This paper uses the concept of 'views' in order to achieve full separation between the application and the security policy in the design and implementation. The result is achieved by providing a model for capabilities using 'views' that is richer than the traditional capability model. In addition, a distributed access control model is shown to be effective through the use of Secure Object Communication Channels (SOCCs) to allow for secure connections at the abstract object level. This security is applicable in the e-commerce application domain, bringing security directly to the application abstraction level.