Security for OOPP

09.12.2002

Abstract

OOPP is a prototype of a modern middleware system that is based on reflection and supports quality of service management. It gives the possibility to inspect, adapt, and extend the components of the system in order to satisfy the requirements of a given application.

When the system is to be used in a real world setting, security is needed. Security, in general terms, deals with the issues of privacy, authentication, and authorization. More specifically, in a middleware environment, a monitor guarding a resource must be able to verify the authenticity of a request and to determine whether this should be allowed or not. On the other side of the communication channel, the client who wants to access the resource must be able to authenticate the server and to provide it with the evidence of this right to access the resource.

In this thesis we set up the requirements for a security infrastructure for OOPP, we discuss the design choices we made, and describe its implementation.