Integrating Security Policies via Container Portable Interceptors

In the past, it was very common to develop middleware without consideration of security from the very beginning. To integrate security, the middleware that should be protected has to provide appropriate hooks and interfaces, and has to meet the requirements of security. In most cases it is not possible to develop a new, secure middleware from scratch. It is only possible to make minor modification to existing systems. In this paper we describe the successful integration of a CORBA Component based middleware and a policy management framework for the definition, management and enforcement of security policies. Integration is achieved by defining Container Portable Interceptors and QoS Enablers which provide the necessary hooks for interception and provision of context interfaces to integrate the security framework. Categories and Subject Descriptors C.2.4 [Distributed Systems]: Client/Server, Distributed applications; D.4.6 [Security]: Access controls, authentication, information flow c...

• Type: Journal
• Year: 2006
• Where: DSONLINE
• Authors: Tom Ritter, Rudolf Schreiner, Ulrich Lang
• Keywords: Container Portable Interceptors, DSONLINE 2006, Portable Interceptors, Security