Tools, Interfaces, and Access Control for Secure Programming

9870316不相互信任的软件组件成为同一程序的一部分的情况越来越普遍；示例包括Java小程序、ActiveX控件、组件对象模型（COM）对象和可扩展操作系统。方法和工具的创建使程序员更容易编写与潜在恶意组件链接时能够安全运行的软件组件。这是通过结合几个主题的研究成果来完成的：信息隐藏和语言设计、分层模块化、动态链接和访问控制。这项工作的一个结果是一组工具，这些工具可以让程序员精确地控制软件的可见性和可访问性，允许根据客户端代码的来源将软件组件的不同视图呈现给不同的软件客户端。软件工具被实现和分发，以支持用Java和ML语言编写的程序

9870316 It is becoming increasingly common for mutually untrusting software components to be parts of the same program; examples include Java applets, ActiveX controls, Component Object Model (COM) objects, and extensible operating systems. Methods and tools are created that make it easier for programmers to write software components that will function securely when linked with potentially hostile components. This is done by combining research results on several topics: information hiding and language design, hierarchical modularity, dynamic linking, and access control. One result of this work is a set of tools that let programmers precisely control the visibility and accessibility of pieces of their software, allowing different views of a software component to be presented to different software clients depending on the provenance of the client code. Software tools are implemented and distributed to support this for programs written in the Java and ML languages.***