An Approach for Specifying Access Control Policy in J2EE Applications

Vo, Hieu Dinh

doi:10.1109/aspec.2007.19

Cited by 2 publications

(3 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In our framework, we use the concept of business functions (Vo and Suzuki, 2007) to define the call flows (at design time). Meanwhile, at runtime, a call flow is a series of methods invoked by a thread.…”

Section: Bfsec Frameworkmentioning

confidence: 99%

“…The concept of business function is introduced in the work about a flexible approach for specifying access control in EJB applications (Vo and Suzuki, 2007). In this paper, we revise the description of business function so that it is suitable for the BFSec framework.…”

Section: Business Functionsmentioning

confidence: 99%

“…In this paper, we present our work on building a framework for protecting EJB applications from the malicious beans. We utilize the concept of business function (Vo and Suzuki, 2007) along with the Intercepting Filter pattern (Alur et al, 2003) to ensure that methods of beans are invoked not only by the right person but also from the right places.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Framework for Protecting Ejb Applications From Malicious Components

Vo¹,

Suzuki²

2008

Proceedings of the Tenth International Conference on Enterprise Information Systems

View full text Add to dashboard Cite

Enterprise JavaBeans (EJB) components in an EJB application can be obtained from various sources. These components may be in-house developed or bought from other vendors. In the latter case, the source code of the components is usually not available to application developers. The result is that the application may contain malicious components. We propose a framework called BFSec that protects EJB applications from vicious components. The framework examines bean methods invoked by each thread in applications and compares them with pre-defined business functions to check whether the latest calls of threads are proper. Unexpected calls, which are considered to be made by malicious components, will be blocked.

show abstract

Section: Bfsec Frameworkmentioning

confidence: 99%

Section: Business Functionsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation