Por favor, use este identificador para citar o enlazar este ítem:
http://hdl.handle.net/10609/93050
Título : | Model-based analysis of Java EE web security misconfigurations |
Autoría: | Martínez Pérez, Salvador Cosentino, Valerio Cabot, Jordi |
Otros: | AtlanMod Universitat Oberta de Catalunya (UOC) |
Citación : | Martínez Pérez, S., Cosentino, V. & Cabot Sagrera, J. (2017). Model-based analysis of Java EE web security misconfigurations. Computer Languages, Systems and Structures, 49(), 36-61. doi: 10.1016/j.cl.2017.02.001 |
Resumen : | The Java EE framework, a popular technology of choice for the development of web applications, provides developers with the means to define access-control policies to protect application resources from unauthorized disclosures and manipulations. Unfortunately, the definition and manipulation of such security policies remains a complex and error prone task, requiring expert-level knowledge on the syntax and semantics of the Java EE access-control mechanisms. Thus, misconfigurations that may lead to unintentional security and/or availability problems can be easily introduced. In response to this problem, we present a (model-based) reverse engineering approach that automatically evaluates a set of security properties on reverse engineered Java EE security configurations, helping to detect the presence of anomalies. We evaluate the efficacy and pertinence of our approach by applying our prototype tool on a sample of real Java EE applications extracted from GitHub. |
Palabras clave : | ingeniería dirigida por modelos seguridad ingeniería inversa |
DOI: | 10.1016/j.cl.2017.02.001 |
Tipo de documento: | info:eu-repo/semantics/article |
Versión del documento: | info:eu-repo/semantics/submittedVersion |
Fecha de publicación : | 1-sep-2017 |
Licencia de publicación: | http://creativecommons.org/licenses/by-nc-nd/3.0/es/ |
Aparece en las colecciones: | Articles cientÍfics Articles |
Ficheros en este ítem:
Fichero | Descripción | Tamaño | Formato | |
---|---|---|---|---|
javaEE.pdf | Preprint | 440,09 kB | Adobe PDF | Visualizar/Abrir |
Comparte:
Los ítems del Repositorio están protegidos por copyright, con todos los derechos reservados, a menos que se indique lo contrario.