Wrappers - A mechanism to support state-based authorisation in Web applications

M. S. Olivier; Ehud Gudes

doi:10.1016/S0169-023X(02)00129-5

Wrappers - A mechanism to support state-based authorisation in Web applications

M. S. Olivier, Ehud Gudes

Department of Computer Science

Research output: Contribution to journal › Article › peer-review

3 Scopus citations

Abstract

The premises of this paper are (1) security is application dependent because application semantics directly influence proper protection; but (2) applications are generally too complex to be trusted to implement security as specified by the given security policy. These problems are aggravated if the application operates over time and space. This paper proposes the use of a simple program (a "wrapper") that has enough knowledge about a specific application's potential states and the actions that are permissible in each state. Using this knowledge, it is able to filter requests that should not reach an application at a given point.

Original language	English
Pages (from-to)	281-292
Number of pages	12
Journal	Data and Knowledge Engineering
Volume	43
Issue number	3
DOIs	https://doi.org/10.1016/S0169-023X(02)00129-5
State	Published - 1 Dec 2002

Keywords

Access control
Application security
State-based authorisation
Web security
Wrappers

ASJC Scopus subject areas

Information Systems and Management

Access to Document

10.1016/S0169-023X(02)00129-5

Cite this

@article{92b0d824d80041a7b8a895287a7d9dc3,

title = "Wrappers - A mechanism to support state-based authorisation in Web applications",

abstract = "The premises of this paper are (1) security is application dependent because application semantics directly influence proper protection; but (2) applications are generally too complex to be trusted to implement security as specified by the given security policy. These problems are aggravated if the application operates over time and space. This paper proposes the use of a simple program (a {"}wrapper{"}) that has enough knowledge about a specific application's potential states and the actions that are permissible in each state. Using this knowledge, it is able to filter requests that should not reach an application at a given point.",

keywords = "Access control, Application security, State-based authorisation, Web security, Wrappers",

author = "Olivier, {M. S.} and Ehud Gudes",

year = "2002",

month = dec,

day = "1",

doi = "10.1016/S0169-023X(02)00129-5",

language = "English",

volume = "43",

pages = "281--292",

journal = "Data and Knowledge Engineering",

issn = "0169-023X",

publisher = "Elsevier",

number = "3",

}

TY - JOUR

T1 - Wrappers - A mechanism to support state-based authorisation in Web applications

AU - Olivier, M. S.

AU - Gudes, Ehud

PY - 2002/12/1

Y1 - 2002/12/1

N2 - The premises of this paper are (1) security is application dependent because application semantics directly influence proper protection; but (2) applications are generally too complex to be trusted to implement security as specified by the given security policy. These problems are aggravated if the application operates over time and space. This paper proposes the use of a simple program (a "wrapper") that has enough knowledge about a specific application's potential states and the actions that are permissible in each state. Using this knowledge, it is able to filter requests that should not reach an application at a given point.

AB - The premises of this paper are (1) security is application dependent because application semantics directly influence proper protection; but (2) applications are generally too complex to be trusted to implement security as specified by the given security policy. These problems are aggravated if the application operates over time and space. This paper proposes the use of a simple program (a "wrapper") that has enough knowledge about a specific application's potential states and the actions that are permissible in each state. Using this knowledge, it is able to filter requests that should not reach an application at a given point.

KW - Access control

KW - Application security

KW - State-based authorisation

KW - Web security

KW - Wrappers

UR - http://www.scopus.com/inward/record.url?scp=0036887432&partnerID=8YFLogxK

U2 - 10.1016/S0169-023X(02)00129-5

DO - 10.1016/S0169-023X(02)00129-5

M3 - Article

AN - SCOPUS:0036887432

SN - 0169-023X

VL - 43

SP - 281

EP - 292

JO - Data and Knowledge Engineering

JF - Data and Knowledge Engineering

IS - 3

ER -

Wrappers - A mechanism to support state-based authorisation in Web applications

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this