|
Abstract : |
Abstract: This paper describes a protection scheme for the Java environment. This scheme allows a programmer to specify the protection rights assigned to a class loaded from a remote site with respect to the local files. Protection is expressed in a high-level notation that extends the interface definition of the protected class. Protection is enforced by stubs that are automatically generated from the specification and that are interposed in front of the protected classes, with no possibility of bypassing. The scheme makes extensive use of the ability provided by the Java environment to redefine the class loaders, and relies on the use of ?hidden ? (i.e. invisible to the programmer) capabilities, a device previously proposed by some of the authors. Preliminary experiments have shown the feasibility of this method. The code of this system will be made freely available. 1, |
