|
|
|
 |
|
 |
|
Integrating Capabilities into the Object Model to Protect Distributed Object Systems
|
M. Díaz-Fondón,
D. Álvarez-Gutiérrez, and
A. García-Mendoza-Sánchez
View Paper (PDF)
Return to Track II: Potpourri
María Ángeles Díaz-Fondón, Darío Álvarez-Gutiérrez, Armando García-Mendoza-Sánchez
Protection is increasingly a concern for the heterogeneous distributed interoperable object environments that are appearing.Oviedo3 is an example of an Integral Object-Oriented System (IOOS) based solely on the OO paradigm, developed over an OO Abstract Machine (OOAM) and OO Operating System(OOOS). Integrating capabilities into the object model of the abstract machine gives capabilities new advantages, Examples are automatic protection of capabilities and specially the possibility of more flexible security policies with fine-grained protections. These benefits can also be applied to similar systems lacking this uniform protection mechanism, like Java, making them more suitable for these new environments. A prototype implementation is described with a special permission included to improve performance. Examination of preliminary performance figures together with behavior of real-world applications and static analysis techniques point to a favorable cost-benefit balance.
Copyright(C) 2000 ACM
|
|
|
|
|
|
|
