A Formal Approach for Specifying Access Control Security Features of Java Modules

CONCLUSION SIGNIFICANCE • Misuse of sensitive resources, such as system files, database files, network ports, among others, has been recognized as an important source of malicious or unintended malfunctions of software systems. • By means of a formal specification and runtime checking, access to sensitive resources can be better controlled, avoiding possible vulnerabilities in the overall security of the system. • The specification of access control constraints becomes a part of the contract of a module