Composing security policies with polymer

13 years 10 months ago

Download www.ece.cmu.edu

We introduce a language and system that supports deﬁnition and composition of complex run-time security policies for Java applications. Our policies are comprised of two sorts of methods. The ﬁrst is query methods that are called whenever an untrusted application tries to execute a security-sensitive action. A query method returns a suggestion indicating how the security-sensitive action should be handled. The second sort of methods are those that perform state updates as the policy’s suggestions are followed. The structure of our policies facilitates composition, as policies can query other policies for suggestions. In order to give programmers control over policy composition, we have designed the system so that policies, suggestions, and application events are all ﬁrstclass objects that a higher-order policy may manipulate. We show how to use these programming features by developing a library of policy combinators. Our system is fully implemented, and we have deﬁned a form...

Lujo Bauer, Jay Ligatti, David Walker

Real-time Traffic