Carla Merkle Westphall, Joni da S. Fraga: Carlos B. Westphall, Silvia C. S. Bianchi.
This paper proposes extending the CORBA security model to make possible the use of mandatory policies in distributed applications. The Bell & Lapadula model is adopted to define the mandatory controls in the authorization scheme JaCoWeb, through a policy service designated as PoliCap. Our mandatory control is carried out on the level of ORB, on the client side, preventing, inunauthorized accesses, the emission of the corresponding requisition, the associated processing on the server and also, the generation of new requests through this unauthorized processing. Practical experiments and related work are also presented. Key words - Security, Mandatory policies, CORBAsec.
http://www.lbd.dcc.ufmg.br:8080/colecoes/sbrc/2002/053.pdf
Caso o link acima esteja inválido, faça uma busca pelo texto completo na Web: Buscar na Web