Access Control Based on Execution History.

摘要: Security is a major, frequent concern in extensible software systems such as Java Virtual Machines and the Common Language Runtime. These aim to enable simple, classic applets also, for example, distributed applications, Web services, programmable networks, with appropriate security expectations. Accordingly, they feature elaborate constructs mechanisms associating rights code, including technique determining run-time of piece code function state execution stack. prevent many holes, but are inherently partial have proved difficult use reliably. We motivate describe new model assigning code: short, determined by examining attributes any pieces that run (including their origins) explicit requests augment rights. This historybased addresses concerns while avoiding pitfalls. analyze detail; particular, we discuss its relation stack-based policies underlying operating systems, consider implementation techniques. In support model, also introduce implement high-level security, which should be incorporated libraries or (even better) programming languages.