Secure Linking with Object Constraint Language
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Secure Linking (SL) is a flexible way of allowing the users of software components to specify their security policies, and to endow digitally signed certificates with more expressive power at link time. Secure Linking is more flexible than type-checking with allowing informally specified properties, and by providing a way of reasoning about combinations of those properties in a formal way, and more expressive than simple code signing with restricting the scope of guarantee made by digitally signed certificates. In this paper, I propose OCL-SL, Secure Linking with the OCL property authority to improve and prove the practicality of Secure Linking. The OCL property authority can understand the properties written in OCL, and is integrated with the Secure Linking framework. The design of the OCL property authority and its prototype implementation will be given, and the experience of combing a new property authority with the Secure Linking framework will be discussed.
Abstract
Secure Linking (SL) is a flexible way of allowing the users of software components to specify their security policies, and to endow digitally signed certificates with more expressive power at link time. Secure Linking is more flexible than type-checking with allowing informally specified properties, and by providing a way of reasoning about combinations of those properties in a formal way, and more expressive than simple code signing with restricting the scope of guarantee made by digitally signed certificates. In this paper, I propose OCL-SL, Secure Linking with the OCL property authority to improve and prove the practicality of Secure Linking. The OCL property authority can understand the properties written in OCL, and is integrated with the Secure Linking framework. The design of the OCL property authority and its prototype implementation will be given, and the experience of combing a new property authority with the Secure Linking framework will be discussed.
참고문헌 (10)
- A. W. Appel, "Foundational proof-carrying code", Annual IEEE Symposium on Logic in Computer Science (2001)
- A. W. Appel, "Proof-carrying authentication", ACM Conference on Computer and Communications Security (1999)
- A proof-carrying authorization system, "L, Bauer", Tech. report, Department of Computer Science, ~ (2001)
- E. Lee, "Policy-enforced linking of untrusted components (extended abstract)", Proceedings of the 9th European Software Engineering Conference and the 10th ACM SIGSOFT International Symposium on the Foundations of Software Engineering (2003)
- "UML 1.1 specification", OMG document, ~ (1997)
- "Object constraint language specification", OMG Document, ~ (1997)
- "Response to the UML 2.0", OMG document, ~ (2003)
- J. Warner, "The Object Constraint Language" (2003), Addison Wesley
- M. Richters, "A precise approach to validating UML models and OCL constraints", Logos Verlag, ~ (2001)
- B. H. Liskov, "A behavioral notion of subtyping", ACM Transactions on Programming Languages and Systems, 16(6) (1994)