Developing a Security Typed Java Servlet

: The Lack of security policy enforcement in web development languages is one of the most important challenges in web application systems development, as there is no formal check for security policy violation that may occur during web application system development. To check for policy compliance, the programmer must walk through all the code and check every line to make sure that there are no security violations. For example, a developer may develop a web application system connected to data base that seems to work properly, but it can make a certain security policy violation by permitting unauthorized users to access the data base system. This paper proposes a solution for the above problem by developing and application of a security typed Java servlet that can run on the web server side safely. This servlet is developed by embedding the Java code produced by compiling the Java information flow language (Jif) (a security-typed programming language that extends Java with support for i...

• Type: Conference
• Year: 2008
• Where: IEEEIAS
• Authors: Doaa Hassan, Sherif El-Kassas, Ibrahim Ziedan
• Keywords: IEEEIAS 2008, Information Technology, Security Policy Violation, Servlet, Web Application