Hidden software capabilities

Proceedings of 16th International Conference on Distributed Computing Systems Pub Date : 1996-05-27 DOI:10.1109/ICDCS.1996.507926

D. Hagimont, J. Mossière, X. R. D. Pina, F. Saunier

{"title":"Hidden software capabilities","authors":"D. Hagimont, J. Mossière, X. R. D. Pina, F. Saunier","doi":"10.1109/ICDCS.1996.507926","DOIUrl":null,"url":null,"abstract":"Software capabilities are a very convenient means to protect co-operating applications. They allow access rights to be dynamically exchanged between mutually suspicious interacting applications. However in all the proposed approaches, capabilities are made available at the programming language level, requiring application developers to wire protection definition in the application code, which is detrimental to both flexibility and reusability. We believe instead that capabilities should be hidden from the application programmer allowing protection definition and application code to be clearly separated. In this paper we propose a new protection model based on hidden software capabilities, in which protection definition is completely disjoined from the application code and described in an extended interface definition language (IDL). This allows to specify protection for existing modules and to easily change the protection policy of an application. This protection model can be integrated in a wide range of operating systems. We are currently implementing it in a single address space operating system based on distributed shared memory.","PeriodicalId":159322,"journal":{"name":"Proceedings of 16th International Conference on Distributed Computing Systems","volume":"4 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"1996-05-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"41","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of 16th International Conference on Distributed Computing Systems","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICDCS.1996.507926","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 41

Abstract

Software capabilities are a very convenient means to protect co-operating applications. They allow access rights to be dynamically exchanged between mutually suspicious interacting applications. However in all the proposed approaches, capabilities are made available at the programming language level, requiring application developers to wire protection definition in the application code, which is detrimental to both flexibility and reusability. We believe instead that capabilities should be hidden from the application programmer allowing protection definition and application code to be clearly separated. In this paper we propose a new protection model based on hidden software capabilities, in which protection definition is completely disjoined from the application code and described in an extended interface definition language (IDL). This allows to specify protection for existing modules and to easily change the protection policy of an application. This protection model can be integrated in a wide range of operating systems. We are currently implementing it in a single address space operating system based on distributed shared memory.

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

隐藏的软件功能

软件功能是保护协作应用程序的一种非常方便的方法。它们允许访问权限在相互怀疑的交互应用程序之间动态交换。然而，在所有建议的方法中，功能都是在编程语言级别提供的，要求应用程序开发人员在应用程序代码中连接保护定义，这对灵活性和可重用性都是有害的。相反，我们认为功能应该对应用程序程序员隐藏，从而使保护定义和应用程序代码能够清楚地分开。本文提出了一种基于隐藏软件功能的保护模型，该模型将保护定义与应用程序代码完全分离，并用扩展接口定义语言(IDL)进行描述。这允许为现有模块指定保护，并轻松更改应用程序的保护策略。这种保护模型可以集成到各种操作系统中。我们目前正在一个基于分布式共享内存的单地址空间操作系统中实现它。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文去求助

来源期刊

Proceedings of 16th International Conference on Distributed Computing Systems

自引率

0.00%

发文量

期刊最新文献

An extended network scheduling model Distributed priority queues on hypercube architectures An embeddable and extendable language for large-scale programming on the Internet Conservative garbage collection on distributed shared memory systems Optimal deadlock detection in distributed systems based on locally constructed wait-for graphs