Mechanisms for Secure Modular Programming in Java

Source: www.ece.cmu.edu
Topic: Java Programming

Short Desciption:
Java in its native form is lacking. in both respects. Java supports modular programming at both the class. level and the package level. ...

 

Content Inside:
Mechanisms for Secure Modular Programming in JavaPage 1Mechanisms for Secure Modular Programming in JavaLujo BauerAndrew W. AppelEdward W. FeltenPrinceton UniversityNovember 12 1999Revised Version of Technical Report CSTR60399AbstractWe present a new module system for Java that improvesupon many of the deficiencies of the Java package systemand gives the programmer more control over dynamiclinking. Our module system provides explicit interfacesmultiple views of modules based on hierarchical nestingand more flexible namespace management than the Javapackage system. Relationships between modules are explicitly specified in module description files. We providemore control over dynamic linking by allowing importstatements in module description files to require thatimported modules be annotated with certain propertieswhich we implement by digital signatures. Our modulesystem is compatible enough with standard Java that wehave implemented it as a sourcetosource and bytecodetobytecode transformation wrapped around a standardJava compiler using a standard JVM.1 IntroductionThe traditional method of providing softwarebasedprotection within a program is by using abstract datatypes and information hiding. These methods have beenused extensively to make sure that objects can be writtenin ways that allow outsiders only carefully controlledaccess to their implementation details.We argue that the building blocks of todays objectoriented software systems however are not objects orclasses but modules. Modules must provide a frameworkfor information hiding and should help structure theinteraction between different parts of a program. Theymust do this not only to protect programs from nonmalicious mistakes made by other parts of the samesoftware system but also to protect the entire softwaresystem from malicious attack.The Java package system GJS96] is a module system but its notions of information hiding and accesscontrol leave much to be desired especially in hostileenvironments. Ja ...

 

 

distributed programming with java pdf