Integrating security policies via Container Portable Interceptors

  • Authors:
  • Tom Ritter;Rudolf Schreiner;Ulrich Lang

  • Affiliations:
  • Fraunhofer FOKUS, Berlin, Germany;ObjectSecurity Ltd., Cambridge, United Kingdom;ObjectSecurity Ltd., Cambridge, United Kingdom

  • Venue:
  • ARM '05 Proceedings of the 4th workshop on Reflective and adaptive middleware systems
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

In the past, it was very common to develop middleware without consideration of security from the very beginning. To integrate security, the middleware that should be protected has to provide appropriate hooks and interfaces, and has to meet the requirements of security. In most cases it is not possible to develop a new, secure middleware from scratch. It is only possible to make minor modification to existing systems. In this paper we describe the successful integration of a CORBA Component based middleware and a policy management framework for the definition, management and enforcement of security policies. Integration is achieved by defining Container Portable Interceptors and QoS Enablers which provide the necessary hooks for interception and provision of context interfaces to integrate the security framework.