Towards a definitive paradigm for security in object-oriented systems and applications

Issue title: Database Security

Article type: Research Article

Authors: Demurjian Sr., S.A. | Ting, T.C.

Affiliations: Computer Science Engineering Department, The University of Connecticut, Storrs, CT 06269-3155, USA, E-mail: steve@cse.uconn.edu, ting@cse.uconn.edu

Abstract: The utilization of the object-oriented approach to design and develop systems/applications has continued to increase throughout the 1990s. Security concerned users and organizations must now protect and control access to object-oriented systems and applications. This paper frames a paradigm for security in object-oriented systems and applications by addressing the following: –Should not security be elevated to a first-class partner throughout the entire design and development process?–What will be the role of existing approaches to security?–What characteristics of the object-oriented approach should influence the approach to its security?–How will assurance and consistency be attained during the definition, usage, and evolution of an application’s security policy? Inorder to answer these and other questions, an interdisciplinary framework is needed that merges programming languages, software engineering, and databases. The main intent of this paper is to offer an initial treatment of this subject, yielding a definitive paradigm for object-oriented security.

DOI: 10.3233/JCS-1997-5404

Journal: Journal of Computer Security, vol. 5, no. 4, pp. 341-382, 1997