多线程Java程序安全行为模型的静态检查方法_金英.pdfVIP

32 　9 　　　　　　　　 Vol.32 No.9 2009 9 CHIN ESE JOU RNA L OF COMPUTERS Sept.2009 　 Java 金　英　李泽鹏　张　晶　刘　磊 (　　130012) 　　, , . Java , , Java , , . Java . 　Java ;;; TP311　　　DOI :10.3 24/SP.J.1016.2009.01856 Static Checking of Security Related BehaviorModel for Multithreaded Java Programs JIN Ying 　LI Ze-Peng 　ZHA NG Jing 　LIU Lei (Collegeof Comp uter Science and Technology , J ilin University , Changchun　130012) Abstract　Multithreading is an important mechanism for supporting program structuring and parallel computation.With the wide usage of multithreading, security for multithreaded applica- tion has become one of new hot research topics.This paper focuses on the security of Java mul- tithreaded programs.At first, parameterized extended context free grammar has been used to for- mally represent security related behavior model for multithreaded Java program;then the w ay of automatic generation of such model is introduced, and an approach to statically check security re- lated behavior model is formalized.The method has been applied in the framew ork of model car- rying code.It has been indicated that the method provides effective support for safe execution of untrusted multithreaded Java mobile code. eywords　multithreaded Java program ;security related behavior model;static checking ;pa- rameterized extended context free grammar ., 1　　 、、 , . 、、, 、. , 、 :2009-04-19;:2009-08-05..　, , 19 1 , , , 、 、.E-mail:jinying @., , 1984 , , 、.　, , 19 5 , , , 、.　,