| Abstract |
|
Two implementations are given for Java's stack-inspection access-control policy. Each implementation is obtained by generating an inlined reference monitor (IRM) for a different formulation of the policy. Performance of the implementations is evaluated, and one is found to be competitive with Java's less-flexible, JVM-resident implementation. The exercise illustrates the power of the IRM approach for enforcing security policies.
|
 Additional Information
|
Index Terms- Java, security, stack inspection, reference monitor, language-based security
Citation:
Ulfar Erlingsson, Fred B. Schneider,
"IRM Enforcement of Java Stack Inspection,"
sp,
p. 0246,
2000 IEEE Symposium on Security and Privacy (S&P 2000),
2000
|
