MQP:Java Security - Revision history

J at 15:22, 27 August 2008

2008-08-27T15:22:44Z

J at 15:16, 27 August 2008

2008-08-27T15:16:21Z

J at 13:32, 26 August 2008

2008-08-26T13:32:36Z

J at 12:59, 26 August 2008

2008-08-26T12:59:40Z

J at 12:53, 26 August 2008

2008-08-26T12:53:51Z

J at 12:52, 26 August 2008

2008-08-26T12:52:04Z

J at 12:48, 26 August 2008

2008-08-26T12:48:05Z

J: /* Guarded Object Classes */

2008-08-26T12:40:26Z

‎Guarded Object Classes

J at 20:59, 25 August 2008

2008-08-25T20:59:43Z

J at 20:00, 25 August 2008

2008-08-25T20:00:38Z

@@ Line 50: / Line 50: @@
 :When checkPermission() is called, this class unrolls the call stack (using native code), determines all the permissions required, then decides if the call is ok
-[[Image:JavaSecurity.png|frame|Java Security - Permission Checking]]
+[[Image:JavaSecurity.png|frame|Java Security - Permission Checking]]<br>
 ===Guarded Object Classes===

@@ Line 50: / Line 50: @@
 :When checkPermission() is called, this class unrolls the call stack (using native code), determines all the permissions required, then decides if the call is ok
---Diagram Here--
+[[Image:JavaSecurity.png|frame|Java Security - Permission Checking]]
 ===Guarded Object Classes===

@@ Line 80: / Line 80: @@
 </pre>
 ===Setting Policy===
 To set the policy file for the JVM:
 <pre>
@@ Line 85: / Line 86: @@
 </pre>
 Using "==" in place of "=" will cause the JVM to ignore other policy files. (not sure what this means...)
 ==The Policy File==
 Lot more to learn about this.
@@ Line 94: / Line 101: @@
 *Detailed documentation list - http://java.sun.com/javase/6/docs/technotes/guides/security/index.html
 *Details of each of Java's packaged Permission classes - http://java.sun.com/j2se/1.4.2/docs/guide/security/permissions.html
 *policytool user guide - http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyGuide.html
 *Details about the policy file - http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html

@@ Line 1: / Line 1: @@
 [[Category:MQP-Research]]
-{{#categorytree:MQP|mode=pages}}
+{{MQP:Navbar}}
 ==Overview==
 Java, since 1.2, has some interesting security features related to access control.  There are many security features dealing with Java's class loaders, assuring that the code is from a trusted source, and certificate/key management that will not be discussed here.  These features are important to Java's overall security design, but are not important to the scope of this project.

@@ Line 1: / Line 1: @@
 [[Category:MQP-Research]]
-{{#categorytree:MQP|hideroot|mode=pages}}
+{{#categorytree:MQP|mode=pages}}
 ==Overview==
 Java, since 1.2, has some interesting security features related to access control.  There are many security features dealing with Java's class loaders, assuring that the code is from a trusted source, and certificate/key management that will not be discussed here.  These features are important to Java's overall security design, but are not important to the scope of this project.

@@ Line 12: / Line 12: @@
 ;Permission (Abstract Class)
 :Defines a type of permission
 ;PermissionCollection (Abstract Class)
 :Contains a number of related Permission objects

← Older revision		Revision as of 12:40, 26 August 2008
Line 34:		Line 34:

	===Guarded Object Classes===		===Guarded Object Classes===
		+	Guarded objects are used to pass objects around different access control contexts while maintaining a level of protection. Only code from an appropriate access control context may obtain the associated object.

		+	;GuardedObject (Object Class)
		+	:Used to hold an object and a Guard
		+	:Object can be obtained using the getObject() method - which does a security check using the associated Guard
		+	;Guard (Interface)
		+	:Defines a method to decide if a security check passes
		+	:The method is "public Result evaluate(FSM, Input)" (where FSM is the state machine causing this action, Input is the input that caused the transition)
		+	;Permission (Abstract Class, implements Guard)
		+	:Permission implements Guard by using the SecurityManager (if one exists) to check for this Permission

	==Using Java Security==		==Using Java Security==

@@ Line 8: / Line 8: @@
 ==Security Architecture Overview==
-Most of Java's security classes reside in the ''java.security'' package.  For the purposes of this list, if no package is noted, ''java.security'' can be assumed.
+Most of Java's security classes reside in the ''java.security'' package.  For the purposes of this section, if no package is noted, ''java.security'' can be assumed.
 ;Permission (Abstract Class)
 :Defines a type of permission
@@ Line 31: / Line 32: @@
 --Diagram Here--
 ==Using Java Security==
@@ Line 53: / Line 57: @@
 </pre>
 Using "==" in place of "=" will cause the JVM to ignore other policy files. (not sure what this means...)
 ==References==
 *An architecture overview - http://articles.techrepublic.com.com/5100-10878_11-6177275.html
@@ Line 59: / Line 67: @@
 *Details of each of Java's packaged Permission classes - http://java.sun.com/j2se/1.4.2/docs/guide/security/permissions.html
 [[Category:MQP]]

@@ Line 1: / Line 1: @@
 {{#categorytree:MQP|hideroot|mode=pages}}
 ==Overview==
-Java, since 1.2, has some interesting security features related to access permissions.
+Java, since 1.2, has some interesting security features related to access control.  There are many security features dealing with Java's class loaders, assuring that the code is from a trusted source, and certificate/key management that will not be discussed here.  These features are important to Java's overall security design, but are not important to the scope of this project.
 {{Incomplete}}
 ==Security Architecture Overview==
-There are many security features dealing with Java's class loaders and assuring that the code is from a trusted source that will not be discussed here.  These features are not important to the scope of this project.
+Most of Java's security classes reside in the ''java.security'' package.  For the purposes of this list, if no package is noted, ''java.security'' can be assumed.
-−
-Java's security classes reside in the ''java.security'' package.  The include:
 ;Permission (Abstract Class)
 :Defines a type of permission
@@ Line 21: / Line 21: @@
 :Contains a number of PermissionCollection objects sored in a map, keyed by their ProtectionDomain
 :Determines if proper permissions are available for a given Permission based on its existence in the proper ProtectionDomain
-;SecurityManager (Object Class)
+;java.lang.SecurityManager (Object Class)
-:Provides permission resolution to the whole program
+:Provides permission resolution to the whole program (via System.getSecurityManager()) by acting as the "central point of access control"
 --Diagram Here--