Two implementations are given for Java's stack-inspection access-control policy. Each implementation is obtained by generating an inlined reference monitor (IRM) for a different formulation of the policy. Performance of the implementations is evaluated, and one is found to be competitive with Java's less-flexible, JVM-resident implementation. The exercise illustrates the power of the IRM approach for enforcing security policies.
Index Terms:
Java, security, stack inspection, reference monitor, language-based security
Citation:
Ulfar Erlingsson, Fred B. Schneider, "IRM Enforcement of Java Stack Inspection," sp, pp.0246, 2000 IEEE Symposium on Security and Privacy (S&P 2000), 2000