Large-scale Open Distributed Systems Provide An Infrastructure For Assembling Global Applications On The Basis Of Software And Hardware Components Originating From Multiple Sources. Open Systems Rely On Publicly Available Standards To Permit Heterogeneous Components To Interact. The Internet Is The Archetype Of A Large-scale Open Distributed System; Standards Such As Http, Html, And Xml, Together With The Widespread Adoption Of The Java Language, Are The Cornerstones Of Many Distributed Systems. This Book Surveys Security In Large-scale Open Distributed Systems By Presenting Several Classic Papers And A Variety Of Carefully Reviewed Contributions Giving The Results Of New Research And Development. Part I Provides Background Requirements And Deals With Fundamental Issues In Trust, Programming, And Mobile Computations In Large-scale Open Distributed Systems. Part Ii Contains Descriptions Of General Concepts, And Part Iii Presents Papers Detailing Implementations Of Security Concepts. Foundations -- Trust: Benefits, Models, And Mechanisms -- Protection In Programming-language Translations -- Reflective Authorization Systems: Possibilities, Benefits, And Drawbacks -- Abstractions For Mobile Computation -- Type-safe Execution Of Mobile Agents In Anonymous Networks -- Types As Specifications Of Access Policies -- Security Properties Of Typed Applets -- Concepts -- The Role Of Trust Management In Distributed Systems Security -- Distributed Access-rights Management With Delegation Certificates -- A View-based Access Control Model For Corba -- Apoptosis — The Programmed Death Of Distributed Services -- A Sanctuary For Mobile Agents -- Mutual Protection Of Co-operating Agents -- Implementations -- Access Control In Configurable Systems -- Providing Policy-neutral And Transparent Access Control In Extensible Systems -- Interposition Agents: Transparently Interposing User Code At The System Interface -- J-kernel: A Capability-based Operating System For Java -- Secure Network Objects -- History-based Access Control For Mobile Code -- Security In Active Networks -- Using Interfaces To Specify Access Rights -- Introducing Trusted Third Parties To The Mobile Agent Paradigm. Jan Vitek, Christian D. Jensen, Eds. Includes Bibliographical References And Index. Front Matter....Pages 1-1 Trust: Benefits, Models, and Mechanisms....Pages 3-18 Protection in Programming-Language Translations....Pages 19-34 Reflective Authorization Systems: Possibilities, Benefits, and Drawbacks....Pages 35-49 Abstractions for Mobile Computation....Pages 51-94 Type-Safe Execution of Mobile Agents in Anonymous Networks....Pages 95-115 Types as Specifications of Access Policies....Pages 117-146 Security Properties of Typed Applets....Pages 147-182 Front Matter....Pages 183-183 The Role of Trust Management in Distributed Systems Security....Pages 185-210 Distributed Access-Rights Management with Delegation Certificates....Pages 211-235 A View-Based Access Control Model for CORBA....Pages 237-252 Apoptosis — the Programmed Death of Distributed Services....Pages 253-260 A Sanctuary for Mobile Agents....Pages 261-273 Mutual Protection of Co-operating Agents....Pages 275-285 Front Matter....Pages 287-287 Access Control in Configurable Systems....Pages 289-316 Providing Policy-Neutral and Transparent Access Control in Extensible Systems....Pages 317-338 Interposition Agents: Transparently Interposing User Code at the System Interface....Pages 339-368 J-Kernel: A Capability-Based Operating System for Java....Pages 369-393 Secure Network Objects....Pages 395-412 History-Based Access Control for Mobile Code....Pages 413-431 Security in Active Networks....Pages 433-451 Front Matter....Pages 287-287 Using Interfaces to Specify Access Rights....Pages 453-468 Introducing Trusted Third Parties to the Mobile Agent Paradigm....Pages 469-489
