Inlined Reference Monitors for Java Bytecode

Award Information
Agency:
Department of Commerce
Branch
n/a
Amount:
$299,995.00
Award Year:
2002
Program:
SBIR
Phase:
Phase II
Contract:
NIST 2001-1
Award Id:
52083
Agency Tracking Number:
7.05.05
Solicitation Year:
n/a
Solicitation Topic Code:
n/a
Solicitation Number:
n/a
Small Business Information
317 N. Aurora Street, Ithaca, NY, 14850
Hubzone Owned:
N
Minority Owned:
N
Woman Owned:
N
Duns:
n/a
Principal Investigator:
Paul Anderson
Senior Software Engineer
(607) 273-7340
paul@grammatech.com
Business Contact:
Ray (Tim) Teitelbaum
Chairman
() -
tt@grammatech.com
Research Institute:
n/a
Abstract
Current state-of-the-art technology for specifying and enforcing security policies for software is generally too inflexible, coarse-grained, and difficult to use. In systems that make use of mobile code, such as Java applets, the situation is yet more difficult. A more flexible and powerful approach is needed that will allow a wider range of security policies to be set by various policy-setting authorities for different applications. At the same time, there must be check-box simplicity. We propose to commercialize mechanisms for specifying and enforcing security policies for mobile code that work by inserting fragments of code into programs in order to monitor their state and prevent them from violating security policies. The proposed system will allow arbitrary policies to be specified independently by different policy-setting authorities. We will apply this approach, named Inlined Reference Monitors (IRMs), to Java bytecode using a technique called aspect-oriented programming. We will leverage existing static-analysis technologies in the implementation of a security policy toolkit.

* information listed above is at the time of submission.

Agency Micro-sites


SBA logo

Department of Agriculture logo

Department of Commerce logo

Department of Defense logo

Department of Education logo

Department of Energy logo

Department of Health and Human Services logo

Department of Homeland Security logo

Department of Transportation logo

Enviromental Protection Agency logo

National Aeronautics and Space Administration logo

National Science Foundation logo
US Flag An Official Website of the United States Government