Title :
IRM enforcement of Java stack inspection
Author :
Erlingsson, Úlfar ; Schneider, Fred B.
Author_Institution :
deCODE Genetics, Reykjavik, Iceland
Abstract :
Two implementations are given for Java´s stack inspection access-control policy. Each implementation is obtained by generating an inlined reference monitor (IRM) for a different formulation of the policy. Performance of the implementations is evaluated, and one is found to be competitive with Java´s less flexible, JVM-resident implementation. The exercise illustrates the power of the IRM approach for enforcing security policies
Keywords :
Java; authorisation; distributed programming; virtual machines; IRM approach; IRM enforcement; JVM-resident implementation; Java stack inspection; inlined reference monitor; security policy enforcement; stack inspection access-control policy; Binary codes; Computer science; Computerized monitoring; Decoding; Genetics; Inspection; Java; Power system security; Runtime; Virtual machining;
Conference_Titel :
Security and Privacy, 2000. S&P 2000. Proceedings. 2000 IEEE Symposium on
Conference_Location :
Berkeley, CA
Print_ISBN :
0-7695-0665-8
DOI :
10.1109/SECPRI.2000.848461
