基于角色的访问控制的静态实施
Static Enforcement of Role-Based Access Control
摘要：
我们提出了一种新的静态方法，基于角色的访问控制（RBAC）的政策执行。我们提倡的静态方法包括一种新的设计方法，用于涉及RBAC的应用程序，它将安全需求集成到系统的体系结构中。我们将这种新方法应用于限制Java应用程序中方法调用的策略。我们提出了一种语言来表达RBAC策略调用Java中的方法，一组设计模式，Java程序必须遵守的政策，静态执行，并描述了我们的静态验证器的静态执行检查。
英文摘要：
We propose a new static approach to Role-Based Access Control (RBAC) policy enforcement. The static approach we advocate includes a new design methodology, for applications involving RBAC, which integrates the security requirements into the system's architecture. We apply this new approach to policies restricting calls to methods in Java applications. We present a language to express RBAC policies on calls to methods in Java, a set of design patterns which Java programs must adhere to for the policy to be enforced statically, and a description of the checks made by our static verifier for static enforcement.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
