Using reflection as a mechanism for enforcing security policies on compiled code

摘要: Securing application resources or defining finer-gained access control for system using the Java security architecture requires manual changes to source code. This is error-prone and cannot be done if only compiled code present. We show how behavioural reflection can used enforce policies on Other authors have implemented rewriting toolkits that achieve same effect but they either require expressed in terms of low level abstractions use new high policy languages. Our approach allows reuseable as metaobjects a objecl oriented language (Java), then bound objects at loadtime. The binding between through bytecode under declarative specification. this Kava which portable reflective implementation. customisation rich range runtime behaviour. provides non-bypassable meta suitable implementing enforcement. discuss we secure third-party application, prevent being bypassed, compare its performance with non-reflective