Tools, Interfaces, and Access Control for Secure Programming

9870316相互不信任的软件组件成为同一程序的一部分变得越来越普遍;示例包括Java applet、ActiveX控件、组件对象模型（COM）对象和可扩展操作系统。创建方法和工具，使程序员更容易编写软件组件，当与潜在的恶意组件链接时，这些组件将安全地运行。这是通过结合几个主题的研究成果：信息隐藏和语言设计，层次模块化，动态链接和访问控制。这项工作的一个成果是一组工具，让程序员精确地控制他们的软件的可见性和可访问性，允许软件组件的不同视图根据客户端代码的出处呈现给不同的软件客户端。 软件工具的实现和分发是为了支持用Java和ML语言编写的程序。

9870316 It is becoming increasingly common for mutually untrusting software components to be parts of the same program; examples include Java applets, ActiveX controls, Component Object Model (COM) objects, and extensible operating systems. Methods and tools are created that make it easier for programmers to write software components that will function securely when linked with potentially hostile components. This is done by combining research results on several topics: information hiding and language design, hierarchical modularity, dynamic linking, and access control. One result of this work is a set of tools that let programmers precisely control the visibility and accessibility of pieces of their software, allowing different views of a software component to be presented to different software clients depending on the provenance of the client code. Software tools are implemented and distributed to support this for programs written in the Java and ML languages.***