article · 2010

interfaces; D.2.4 [Software Engineering] Software/Program Verification — Assertion checkers, formal methods, programming by contract; D.3.2 [Programming Languages] Language Classifications — Objectoriented

Carlos E. Rubio-medrano, Yoonsik Cheon, Carlos E. Rubio-medrano, Yoonsik Cheon

Cited by 0Abstract and details only

Abstract

Abstract—Application-level security has become an issue in recent years; for example, errors, discrepancies and omissions in the specification of access control constraints of security-sensitive software components are recognized as an important source for security vulnerabilities. We propose to formally specify access control assumptions or constraints of a program module and enforce them at run-time. We call such specifications access control contracts. To realize access control contracts, we extended the JML language, a formal interface specification language for Java, and developed a prototype support tool that translates access control contracts to runtime checks. The access control contract reduces the vulnerability that a security-sensitive module be exploited to compromise the overall security of a software system. It also facilitates practicing the principle of “security by design ” by

Cite this paper

APA 7

Rubio-medrano, C. E., Cheon, Y., Rubio-medrano, C. E., & Cheon, Y. (2010). interfaces; D.2.4 [Software Engineering] Software/Program Verification — Assertion checkers, formal methods, programming by contract; D.3.2 [Programming Languages] Language Classifications — Objectoriented.

MLA 9

Rubio-medrano, Carlos E., et al. “interfaces; D.2.4 [Software Engineering] Software/Program Verification — Assertion checkers, formal methods, programming by contract; D.3.2 [Programming Languages] Language Classifications — Objectoriented.” 2010.

Chicago

Rubio-medrano, Carlos E., Yoonsik Cheon, Carlos E. Rubio-medrano, and Yoonsik Cheon. 2010. “interfaces; D.2.4 [Software Engineering] Software/Program Verification — Assertion checkers, formal methods, programming by contract; D.3.2 [Programming Languages] Language Classifications — Objectoriented.”

Harvard

Rubio-medrano, C.E. et al. (2010) ‘interfaces; D.2.4 [Software Engineering] Software/Program Verification — Assertion checkers, formal methods, programming by contract; D.3.2 [Programming Languages] Language Classifications — Objectoriented’.

BibTeX

@article{rubiomedrano2010interfaces,
  title = {{interfaces; D.2.4 [Software Engineering] Software/Program Verification — Assertion checkers, formal methods, programming by contract; D.3.2 [Programming Languages] Language Classifications — Objectoriented}},
  author = {Rubio-medrano, Carlos E. and Cheon, Yoonsik and Rubio-medrano, Carlos E. and Cheon, Yoonsik},
  year = {2010}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.