Security in Large Distributed, Object-Oriented Systems

Nowadays we have very large distributed, partially untrusted systems distributed on the internet. As in this environment object orientation is becoming more frequent, security questions arise. For example, Java is a secure language as long as object-oriented interaction between clients and servers is handled with extreme caution. Current security concepts are not suitable for such environments. Distributed object-oriented applications must be adapted to run in a partially untrusted environment, often complete code review or redesign is required and often the security policy has to be implemented directly into the classes of the application. We have designed a security concept for distributed object-oriented systems that separates the implementation of a class or an application and the security policy. Classes can be reused without modification, the security configuration is done orthogonally, even when managing large distributed applications with untrusted parts. Our concept is based o..