Security for distributed object-oriented systems

Object-oriented security mechanisms can provide scalable, fine-grained access control in both applications and at the boundary controller. Existing commercial work has neglected fine-grained access control at the boundary controller. Standards organizations have also neglected security management issues that are vital for scalability. This research focuses on role-based access control mechanisms for CORBA and Java RMI. The resulting approach has been tested through a variety of methods and integrated with several other research prototypes. We describe our access control implementations and the results of our testing and integration activities.