构件运行支撑平台反射体系的安全框架设计与实现-电子学报.PDFVIP

12A Vol. 32 No. 12A 2004 12 ACTA ELECTRONICA SINICA Dec. 2004 白 佳, 黄 罡, 刘 钊, 刘天成, 郑子瞻, 梅 宏 (, 100871) : , . , Internet . , , . , , , , . J2EE PKUAS( Peking University Applic tion Server) , . : ; ; ; J2EE : TP311 : A : ( 2004) 12A20704 An Access Control Framework for Reflective J2EE Application Server BAI Ji , HUANG G ng, LIU Zh o, LIU Ti ncheng, ZHENG Zizh n, MEI Hong ( Dep artment of Computer Science and Technology , Peking University , Beji i ng 100871, Chi na ) Abstract : Reflective middlew re opens up the implement tion det ils of middlew re pl tform nd pplic tions t runtime to im prove the d pt bility of tr dition l middlew re.However, such openness brings new thre ts to security of middlew re pl tform nd p plic tions.This p per studies how to protect reflective J2EE pplic tion server with set of ccess control mech nisms. At first, comput tion model of reflective middlew re is built up nd illustr tes th t the ccess control of reflective middlew re is f r more com plex nd difficult to implement th n th t of tr dition l middlew re. With the model, ll potenti l ccess control points re identified while only some of the points require ccess control mech nisms. It reve ls th t the complexity nd cost of the ccess control fr mework re m inly rel ted to the concrete implement tion of reflective mech nisms. At l st, the fr mework is implemented m inly by reusing the ccess control mech nisms existing in tr dition l middlew re nd the perform nce is ev lu ted. Key words: reflective middlew re; ccess control; J2EE( J v 2 pl tform, enterprise edition)