Tools, Interfaces, and Access Control for Secure Programming

用于安全编程的工具、接口和访问控制

• 批准号: 9870316
• 负责人: Edward Felten
• 金额: $ 32.2万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 1998
• 资助国家: 美国
• 起止时间: 1998-09-01 至 2002-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=9870316&HistoricalAwards=false
• 关键词: Tools; Interfaces; Access; Control; Secure

9870316 It is becoming increasingly common for mutually untrusting software components to be parts of the same program; examples include Java applets, ActiveX controls, Component Object Model (COM) objects, and extensible operating systems. Methods and tools are created that make it easier for programmers to write software components that will function securely when linked with potentially hostile components. This is done by combining research results on several topics: information hiding and language design, hierarchical modularity, dynamic linking, and access control. One result of this work is a set of tools that let programmers precisely control the visibility and accessibility of pieces of their software, allowing different views of a software component to be presented to different software clients depending on the provenance of the client code. Software tools are implemented and distributed to support this for programs written in the Java and ML languages.***

9870316是相互不信任的软件组件成为同一程序的一部分变得越来越普遍。示例包括Java applet，ActiveX控件，组件对象模型（COM）对象和可扩展的操作系统。创建了方法和工具，使程序员更容易编写与潜在敌对组件相关联时将安全起作用的软件组件。这是通过将研究结果结合到几个主题的结合来完成的：信息隐藏和语言设计，分层模块化，动态链接和访问控制。这项工作的结果之一是一组工具，可以使程序员精确地控制其软件部分的可见性和可访问性，从而根据客户端代码的出处将软件组件的不同视图呈现给不同的软件客户端。 软件工具将被实施和分发，以支持使用Java和ML语言编写的程序。***