Anzeige
Erschienen in:
2010 | OriginalPaper | Buchkapitel
Enforcing Secure Object Initialization in Java
verfasst von : Laurent Hubert, Thomas Jensen, Vincent Monfort, David Pichardie
Erschienen in: Computer Security – ESORICS 2010
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Sun and the CERT recommend for secure Java development to
not allow partially initialized objects to be accessed
. The CERT considers the severity of the risks taken by not following this recommendation as
high
. The solution currently used to enforce object initialization is to implement a coding pattern proposed by Sun, which is not formally checked. We propose a modular type system to formally specify the initialization policy of libraries or programs and a type checker to statically check at load time that all loaded classes respect the policy. This allows to prove the absence of bugs which have allowed some famous privilege escalations in Java. Our experimental results show that our safe default policy allows to prove 91% of classes of
java.lang
,
java.security
and
javax.security
safe without any annotation and by adding 57 simple annotations we proved all classes but four safe. The type system and its soundness theorem have been formalized and machine checked using Coq.