A security framework for reflective Java applications

  • Authors:

  • Denis Caromel;Julien Vayssière

  • Affiliations:

  • INR1A Sophia Antipolis, 2004, Route des Lucioles, BP 93, 06902 Sophia Antipolis, France;INR1A Sophia Antipolis, 2004, Route des Lucioles, BP 93, 06902 Sophia Antipolis, France

  • Venue:
  • Software—Practice & Experience
  • Year:
  • 2003

Quantified Score

Hi-index 0.01

Visualization

Abstract

The advent of component-based reflective applications raises the issue of protecting baselevel components from the actions performed by metalevel components. However, by their very nature, reflective applications are far more difficult to secure than non-reflective applications, which certainly explains why the problem has received very little attention so far. In this paper we present a security framework for enforcing access control between metalevel components and the baselevel components they reflect on Rather than designing a new security architecture from scratch, we extend the standard security architecture of Java to provide security for a fully-functional proxy-based MOP for Java. We implement a number of well-known meta-level behaviors and study their security requirements, the results of which support our design choices.