Expanding and extending the security features of java
SSYM'98 Proceedings of the 7th conference on USENIX Security Symposium - Volume 7
| Hi-index | 0.00 |
The use of the internet has increased extensively with a growing number of inexperienced users surfing the Web. Lurking in Web pages, Java applets are automatically executed on users'' machines. As a result, popular Web browsers are understandably conservative on what they allow Java applets to do. However, this places a heavy restriction on applets which drastically limits their capabilities. Therefore, we have developed a constraint language in which naive users can specify their fine-grained control over applets without needing to know the the intricacies of applet security. We have written an implementation of the Java Security Manager built into Sun''s AppletViewer to demonstrate the feasability of this approach, addressing the many security issues that arise when opening the operating system to the public domain. This involves maintaining a log of applets'' past accesses to determine the allowability of their future accesses, along with an account of which applets ''own'' which files.