Enforcing security rules at runtime
AssigneeOracle International Corporation
InventorsJames Driscoll, Shailesh Vinayaka, Steven P. Muench
Life of this patent
Estimating the term…
Abstract
Various arrangements for implementing a security policy at runtime are presented. A plurality of calls in a syntax tree may be identified. Each call of the plurality of calls may be substituted with a corresponding security-modified call to create a plurality of security-modified methods calls. Each security-modified call may be linked with a security class. Following modification of each call of the plurality of calls, the plurality of security-modified calls may be compiled into bytecode.
Claims20
A method for implementing a security policy at runtime, the method comprising:
- identifying, by a computer system, a plurality of calls;
- modifying, by the computer system, each call of the plurality of calls with a corresponding security-modified call to create a plurality of security-modified calls, wherein each security-modified call is linked with a security class;
- and
- following modification of each call of the plurality of calls, compiling, by the computer system, the plurality of security-modified calls.
A computer program product residing on a non-transitory processor-readable medium for implementing a security policy at runtime, the computer program product comprising computer-readable instructions configured to cause a computer to:
- identify a plurality of calls;
- modify each call of the plurality of calls with a corresponding security-modified call to create a plurality of security-modified calls, wherein each security-modified call is linked with a security class;
- and
- following modification of each call of the plurality of calls, compile the plurality of security-modified calls.
A system for implementing a security policy at runtime, the system comprising:
- a computer system, comprising:
- a processor;
- and
- a memory communicatively coupled with and readable by the processor and having stored therein processor-readable instructions which, when executed by the processor, cause the processor to:
- identify a plurality of calls;
- modify each call of the plurality of calls with a corresponding security-modified call to create a plurality of security-modified calls, wherein each security-modified call is linked with a security class;
- and
- following modification of each call of the plurality of calls, compile the plurality of security-modified calls.
Dependencies are inferred from the claim text.