Access Control to Reflection with Object Ownership

Teruel, Camille; Ducasse, Stephane; Cassou, Damien; Denker, Marcus

Type de document :

Communication dans un congrès avec actes

DOI :

10.1145/2816707.2816721

Titre :

Access Control to Reflection with Object Ownership

Auteur(s) :

Teruel, Camille [Auteur]
Analyses and Languages Constructs for Object-Oriented Application Evolution [RMOD]
Ducasse, Stephane [Auteur]

Analyses and Languages Constructs for Object-Oriented Application Evolution [RMOD]
Cassou, Damien [Auteur]

Analyses and Languages Constructs for Object-Oriented Application Evolution [RMOD]
Denker, Marcus [Auteur]

Analyses and Languages Constructs for Object-Oriented Application Evolution [RMOD]

Titre de la manifestation scientifique :

Dynamic Languages Symposium

Ville :

USA

Pays :

France

Date de début de la manifestation scientifique :

2015-10-29

Titre de l’ouvrage :

Proceedings of the 11th Symposium on Dynamic Languages

Titre de la revue :

Proceedings of the 11th Symposium on Dynamic Languages

Mot(s)-clé(s) en anglais :

object ownership
encapsulation
reflection

Discipline(s) HAL :

Informatique [cs]/Langage de programmation [cs.PL]

Résumé en anglais : [en]

Reflection is a powerful programming language feature that enables language extensions, generic code, dynamic analyses , development tools, etc. However, uncontrolled reflection breaks object encapsulation and considerably ...
Lire la suite >Reflection is a powerful programming language feature that enables language extensions, generic code, dynamic analyses , development tools, etc. However, uncontrolled reflection breaks object encapsulation and considerably increases the attack surface of programs e.g., malicious libraries can use reflection to attack their client applications. To bring reflection and object encapsulation back together, we use dynamic object ownership to design an access control policy to reflective operations. This policy grants objects full reflective power over the objects they own but limited reflective power over other objects. Code is still able to use advanced reflective operations but reflection cannot be used as an attack vector anymore.Lire moins >

Langue :

Anglais

Comité de lecture :

Oui

Audience :

Internationale

Vulgarisation :

Non

Collections :

Centre de Recherche en Informatique, Signal et Automatique de Lille (CRIStAL) - UMR 9189

Source :

Harvested from HAL

Fichiers

https://hal.inria.fr/hal-01217041/document
Accès libre
Accéder au document

https://hal.inria.fr/hal-01217041/document
Accès libre
Accéder au document

https://hal.inria.fr/hal-01217041/document
Accès libre
Accéder au document

document
Accès libre
Accéder au document

Teru15b-DLS15-AccessControlWithOwnership.pdf
Accès libre
Accéder au document

document
Accès libre
Accéder au document

Teru15b-DLS15-AccessControlWithOwnership.pdf
Accès libre
Accéder au document

Access Control to Reflection with Object Ownership BibTeX CSV Excel RIS

Fichiers

Access Control to Reflection with Object Ownership

BibTeX

CSV

Excel

RIS