IRM Enforcement of Java Stack Inspection

Two implementations are given for Java’s stack-inspection accesscontrol policy. Each implementation is obtained by generating an inlined reference monitor (IRM) for a different formulation of the policy. Performance of the implementations is evaluated, and one is found to be competitive with Java’s less-flexible, JVM-resident implementation. The exercise illustrates the power of the IRM approach for enforcing security policies.

• Type: Conference
• Year: 2000
• Where: SP
• Authors: Úlfar Erlingsson, Fred B. Schneider
• Keywords: Inlined Reference Monitor, IRM Approach, Java’s Stack-inspection Accesscontrol, Security Privacy, SP 2000