An extensible framework for analysis of Java language-based security conformance

用于分析基于 Java 语言的安全一致性的可扩展框架

• 批准号: LP140100700
• 负责人: Em/Prof Ian Hayes
• 金额: $ 26.81万
• 依托单位: The University of Queensland
• 依托单位国家: 澳大利亚
• 项目类别: Linkage Projects
• 财政年份: 2015
• 资助国家: 澳大利亚
• 起止时间: 2015-05-25 至 2019-12-31
• 项目状态: 已结题
• 来源: https://dataportal.arc.gov.au/RGS/Web/Grants/LP140100700
• 关键词: extensible; framework; analysis; Java; language

Java is a programming language and platform running on 3 billion devices. While Java provides a sandbox-based security architecture within the Java Class Library to protect systems from untrusted code downloaded from Internet, it cannot defend against implementation bugs that occur in the Java Class Library. The goal of this project is to provide a formal model of the Java security architecture, which can be used by program analysers to identify faulty or insufficient security checks in the Java Class Library that may lead to the sandbox being bypassed.

Java是一种在30亿台设备上运行的编程语言和平台。虽然Java在Java类库中提供了一个基于沙箱的安全体系结构，以保护系统免受从Internet下载的不可信代码的攻击，但它无法防御Java类库中发生的实现错误。这个项目的目标是提供一个正式的Java安全体系结构模型，程序分析器可以使用它来识别Java类库中可能导致沙箱被绕过的错误或不充分的安全检查。