Security critical data containers

Details Security critical data containers Security critical data containers

2005-02-04

2009-10-06

LaForgia, Christian (Department: 2439)

Information security

Monitoring or scanning of software or data including attack...

C707S793000

Reexamination Certificate

active

07600256

ABSTRACT:
Described are security critical data containers for platform code, comprising a Get container and Set container that allow data to be marked as security critical for critical usage of that data, but left unmarked for non-critical usage. The number of critical methods in the code is reduced, facilitating better code analysis. A container's method may be marked as security critical, with the only access to the data via the method. By using a generic class for a Get container, access to the critical data only occurs through the property on the class, which is marked as critical. The field pointing to the generic class instance need not be critical, whereby initialization or existence checking may remain non-critical. The Set container handles security critical situations such as data that controls whether code can elevate permissions; a set method is marked as critical, while other methods can be accessed by non-critical code.

REFERENCES:
patent: 5335346 (1994-08-01), Fabbio
patent: 5765152 (1998-06-01), Erickson
patent: 6047377 (2000-04-01), Gong
patent: 6226618 (2001-05-01), Downs et al.
patent: 6938164 (2005-08-01), England et al.
patent: 2003/0037237 (2003-02-01), Abgrall et al.
patent: 2242295 (1991-09-01), None
Li Gong; Secure Java Class Loading; Sun Microsystems; IEEE Internet; Nov.-Dec. 1998.
Gomes, Benedict, et al., “A Language Manual for Sather 1.1”, Retrieved from the Internet: URL:http://www.icsi.berkeley.edu/{sather/Documentation/LanguageDescription/Descript.pdf.gz> Oct. 2, 1996, pp. 13-38.
Papa, M. et al., “Extending Java for Package Based Access Control”, Computer Security Applications, 2000. ACSA 16th Annual Conference, New Orleans, Louisiana. Dec. 11-15, 2000.

Affiliated with

Also associated with

Rating

Security critical data containers does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Security critical data containers, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Security critical data containers will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4069185