Authors: Schönefeld, Marc
Title: Anti-Patterns in JDK Security and Refactorings
Language (ISO): en
Abstract: This paper underlines the importance of security awareness whilst programming Java applications. Several problems in current JDK implementations are demonstrated that allow to undermine the security of Java applications. Coding errors and quality problems in current Java distributions create possibilities to create covert channels, cause resource blocking and denial-of-service attacks. To make things worse Java components are often deployed according to the AllPermissions antipattern with non-restrictive security settings, which allows bugs on the system layer to be exploited by attackers. Coping with this antipattern from the user side is connected with the definition of adequate permission sets. A tool that automates this time consuming task is presented as a refactoring for the AllPermission antipattern.
Subject Headings: Vulnerability Assessment
Issue Date: 2004-07
Provenance: Gesellschaft für Informatik
Citation: Schönefeld, Marc: Anti-Patterns in JDK Security and Refactorings. In Flegel, U.; Meier, M. (Eds.): Proc. of the International GI Workshop on Detection of Intrusions and Malware & Vulnerability Assessment, number P-46 in Lecture Notes in Informatics, pp. 175-186, Dortmund, Germany, July 2004, Köllen Verlag; ISBN 3-88579-365-X.
Is part of: DIMVA 2004, July 6-7, Dortmund, Germany
Appears in Collections:Papers

Files in This Item:
File Description SizeFormat 
DIMVA2004-Schoenefeld.pdf302.58 kBAdobe PDFView/Open

This item is protected by original copyright

All resources in the repository are protected by copyright.