构件运行支撑平台反射体系的安全框架设计与实现  

An Access Control Framework for Reflective J2EE Application Server

作　　者：白佳[1] 黄罡[1] 刘钊[1] 刘天成[1] 郑子瞻[1] 梅宏[1] 

机构地区：[1]北京大学信息科学技术学院软件研究所,北京100871

出　　处：《电子学报》2004年第F12期207-210,共4页Acta Electronica Sinica

基　　金：国家重点基础研究发展规划项目计划 (973计划 ) (No 2 0 0 2CB31 2 0 0 3) ;国家自然科学基金 (No 60 2 330 1 0 ;No 60 1 2 52 0 6 ;No 60 30 30 0 4 ) ;国家高技术研究发展计划 (863计划 ) (No 2 0 0 4AA1 1 2 0 70 ) ;IBM大学合作项目

摘　　要：反射式软件中间件改变了传统中间件纯粹的“黑盒复用”方式 ,以观测和控制基于中间件的软件系统的运行状态和行为 .作为主流的中间件产品 ,构件运行支撑平台有必要引入反射以适应动态开放的Internet环境 .但是 ,在带来更大开放性的同时 ,反射也给构件运行支撑平台带来安全隐患 .为此 ,针对反射体系的特点 ,本文逐层分析其中潜在的安全隐患 ,制定了一种特定于反射体系的安全框架 ,实现了四层安全访问控制机制 .该安全框架在反射式J2EE应用服务器PKUAS(PekingUniversityApplicationServer)中得到实现 ,并通过性能测试考察了安全框架对反射系统运行时刻性能的影响 .Reflective middleware opens up the implementation details of middleware platform and applications at runtime to improve the adaptability of traditional middleware.However,such openness brings new threats to security of middleware platform and applications.This paper studies how to protect a reflective J2EE application server with a set of access control mechanisms.At first,a computation model of reflective middleware is built up and illustrates that the access control of reflective middleware is far more complex and difficult to implement than that of traditional middleware.With the model,all potential access control points are identified while only some of the points require access control mechanisms.It reveals that the complexity and cost of the access control framework are mainly related to the concrete implementation of reflective mechanisms.At last,the framework is implemented mainly by reusing the access control mechanisms existing in traditional middleware and the performance is evaluated.

关 键 词：反射式中间件 构件运行支撑平台 安全 J2EE 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]