State-Based Security Policy Enforcement in Component-Based E-Commerce Applications (2002)
Cached
Download Links
- [www.item.ntnu.no]
- [ls4-www.cs.uni-dortmund.de]
- DBLP
Other Repositories/Bibliography
| Venue: | Proceedings of the 2nd IFIP Conference on ECommerce, E-Business, and E-Government (I3E |
| Citations: | 8 - 4 self |
BibTeX
@INPROCEEDINGS{Herrmann02state-basedsecurity,
author = {Peter Herrmann and Lars Wiebusch and Heiko Krumm},
title = {State-Based Security Policy Enforcement in Component-Based E-Commerce Applications},
booktitle = {Proceedings of the 2nd IFIP Conference on ECommerce, E-Business, and E-Government (I3E},
year = {2002},
pages = {195--209},
publisher = {Kluwer Academic Publisher}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract Software component technology supports the cost-effective development of e-commerce applications but also introduces special security problems. In particular, a malicious component is a threat to any application incorporating it. Therefore wrappers are of interest which control the behavior of components at run-time and enforce the application’s security policies. The wrapper of a component monitors the component behavior at its interfaces and checks its compliance with the security behavior constraints of the component’s employment contract. We propose state-based security policy definitions, report on their suitable design, and clarify their employment by means of a component-structured e-procurement application.
Keyphrases
state-based security policy enforcement component-based e-commerce application special security problem state-based security policy definition malicious component abstract software component technology e-commerce application cost-effective development component employment contract security behavior constraint component behavior application security policy component-structured e-procurement application suitable design
