基于安全元对象的CORBA系统的访问控制机制

目前 ,使用反射机制实现非功能性机制变得越来越流行 ,出现了面向可靠性应用的各种元对象协议。针对CORBA安全服务在访问控制的细粒度实现、可定制性方面不够灵活的问题 ,提出了基于安全元对象的CORBA系统的访问控制技术。反射机制把客户对服务器对象的访问隔离开来 ,进行访问权限的检查和安全审计 ,防止应用软件的非法访问和操作来提高系统可靠性。安全元对象协议的实现采用了开放式编译器 ,使最终的访问控制系统代码量小、运行开销小 ,同时安全策略定制灵活、易于扩展

Implementing Access Control for a CORBA System by Security Metaobject

The use of reflection for implementation of non-functional mechanisms has become popular today, which results in various metaobject protocols. Considering that security service of CORBA lacks flexibility in access control, a security metaobject-based access control technique tor a CORBA system is presented. The reflective mechanism isolates the clients from the server object to validate the permissions and auditing, thus raising the dependability of the system. In the implementation of the metaobject protocol an open compiler is adopted, which reduces the amount of codes and overhead of the access control system, at the same time, it improves the flexibility and extensibility of security policies.