Enforcing security rules at runtime

摘要

Various arrangements for implementing a security policy at runtime are presented. A plurality of calls in a syntax tree may be identified. Each call of the plurality of calls may be substituted with a corresponding security-modified call to create a plurality of security-modified methods calls. Each security-modified call may be linked with a security class. Following modification of each call of the plurality of calls, the plurality of security-modified calls may be compiled into bytecode.

主权项

1. A method for implementing a security policy at runtime, the method comprising:
identifying, by a computer system, a plurality of calls; modifying, by the computer system, each call of the plurality of calls with a corresponding security-modified call to create a plurality of security-modified calls, wherein each security-modified call is linked with a security class that causes the plurality of security-modified calls to be compared to a security policy at a time of execution; and following modification of each call of the plurality of calls, compiling, by the computer system, the plurality of security-modified calls.