Implementing a CORBA-Based Architecture for Leveraging the Security Level of Existing Applications Domenico Cotroneo, Antonino Mazzeo, Luigi Romano, and Stefano Russo   View Paper (PDF)   Return to Dependability, Security, Assurance Abstract This work presents an implementation technique which exploits separation of concerns and reuse in a CORBA-based, multi-tier architecture to improve the security (availability, integrity, and confidentiality) level of an existing application. Functional properties are guaranteed via wrapping of the existing software modules. All security mechanisms are handled by the business logic of the middle-tier. Availability and integrity are achieved via replication of the functional modules. Confidentiality is obtained via cryptography. The technique is presented with regard to a case study application. We describe the conceptual model behind the architecture, discuss implementation issues, and present technical solutions. DiSC'03 © 2003 Association for Computing Machinery