Extensible access control with authorization contracts
Extensible access control with authorization contracts
复制标题
通过授权合约进行可扩展的访问控制
DOI：
10.1145/2983990.2984021
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Stephen Chong
中科院分区：
文献类型：
--
作者：
Scott Moore;Christos Dimoulas;R. Findler;M. Flatt;Stephen Chong
现有的编程语言访问控制框架并不满足所有软件组件的需求。我们提出了一个表达框架，用于实施组件的访问控制监视器。该框架的基础是一个新颖的概念：权威环境。权威环境将权利与执行环境相关联。我们框架中的访问控制监视器的构件是授权合同：管理权威环境的软件合同。我们通过实施各种现有的访问控制机制并为三个现实的案例研究编写自定义访问控制监视器来证明框架的表现力。
Existing programming language access control frameworks do not meet the needs of all software components. We propose an expressive framework for implementing access control monitors for components. The basis of the framework is a novel concept: the authority environment. An authority environment associates rights with an execution context. The building blocks of access control monitors in our framework are authorization contracts: software contracts that manage authority environments. We demonstrate the expressiveness of our framework by implementing a diverse set of existing access control mechanisms and writing custom access control monitors for three realistic case studies.