Wrappers — a mechanism to support state-based authorisation in Web applications

Olivier and Gudes

2002

Citation information

M. S. Olivier and E. Gudes. “Wrappers — a mechanism to support state-based authorisation in Web applications”. In: Data and Knowledge Engineering 43.3 (2002), pp. 281–292

Abstract

The premises of this paper are 1) security is application dependent because application semantics directly inﬂuence proper protection; but 2) applications are generally too complex to be trusted to implement security as speciﬁed by the given security policy. These problems are aggravated if the application operates over time and space.

This paper proposes the use of a simple program (a “wrapper”) that has enough knowledge about a speciﬁc application’s potential states and the actions that are permissible in each state. Using this knowledge, it is able to ﬁlter requests that should not reach an application at a given point.

Full text

A pre- or postprint of the publication is available at https://mo.co.za/open/wrapper2.pdf.

Deﬁnitive version

The deﬁnitive version of the paper is available from the publisher.
DOI: 10.1016/S0169-023X(02)00129-5

BibTeX reference

@article(wrapper2,
author={Martin S Olivier and Ehud Gudes},
title={Wrappers --- a mechanism to support state-based authorisation in Web applications},
journal={Data and Knowledge Engineering},
volume={43},
number={3},
year={2002},
pages={281--292} )