Policy-driven reflective enforcement of security policies

Authors:
Ian Welch;Fan Lu
Affiliations:
Victoria University of Wellington, NZ;Victoria University of Wellington, NZ
Venue:
Proceedings of the 2006 ACM symposium on Applied computing
Year:
2006

Citing 6
Cited 1

The Java Language Specification

The Java Language Specification
An Overview of AspectJ

ECOOP '01 Proceedings of the 15th European Conference on Object-Oriented Programming
Using reflection as a mechanism for enforcing security policies on compiled code

Journal of Computer Security - Special issue on ESORICS 2000
A flexible access control service for Java mobile code

ACSAC '00 Proceedings of the 16th Annual Computer Security Applications Conference
Going beyond the sandbox: an overview of the new security architecture in the javaTM development Kit 1.2

USITS'97 Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems
Kava - using byte code rewriting to add behavioural reflection to Java

COOTS'01 Proceedings of the 6th conference on USENIX Conference on Object-Oriented Technologies and Systems - Volume 6

A formal framework for reflective database access control policies

Proceedings of the 15th ACM conference on Computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Practical experience has shown that separating security enforcement code from functional code using separation of concerns techniques such as behavioural reflection leads to improvements in code undestandability and maintainability. However, using these techniques at requires providing a consistent and declarative way to specify policies. We have developed a prototype tool that allows the use of Ponder policies that are enforced by the Kava metaobject protocol. This prototype translates high-level policies into configuration files used to enforce the policies upon Java applications.