Mandatory security policies for CORBA security model

Abstract

This paper proposes extending the CORBA (Common Object Request Broker Architecture) security model to make possible the use of mandatory policies in distributed applications. The Bell & LApadula model is adopted to define the mandatory controls in the authorization scheme JaCoWeb, through a policy service designated as PoliCap Our mandatory control is carried out on the level of ORB (Object Request Broker), on the client side, preventing, in unauthorized accesses, the emission of the corresponding requisition, the associated processing on the server and also, the generation of new requests through this unauthorized processing.