E.: Improving Perimeter Security with Security-Oriented Program Transformations

A security-oriented program transformation maps pro-grams to security-augmented programs, i.e. it introduces a security solution to make programs more secure. Our previous work defined security-oriented program transfor-mations [6], introduced a catalog of program transforma-tions [8], and showed how program transformations could be applied to systematically eradicate various types of data injection attacks [9]. This paper shows how security-oriented program transformations could be used to improve the security of a system’s perimeter by introducing authenti-cation, authorization and input validation components. The program transformation examples in this paper are JAVA specific, but the transformations could be implemented to use other authentication and authorization frameworks.