• Home
  • Search
  • Spout: a transparent proxy for safe execution of Java applets
  • Cite Icon13
  • https://doi.org/10.1109/jsac.2002.802074Copy DOI Icon

Spout: a transparent proxy for safe execution of Java applets

Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

The advent of executable contents such as Java applets exposes World Wide Web (WWW) users to a new class of attacks that were not possible before. Despite an array of security checking, detection, and enforcement mechanisms built into the language model, the compiler, and the run-time system of Java, serious security breach incidents due to implementation bugs still arose repeatedly in the past several years. Without a provably correct implementation of Java's security architecture specification, it is difficult to make any conclusive statements about the security characteristic of current Java virtual machines. The Spout project takes an alternative approach to address Java's security problems. Rather than attempt a provable secure implementation, we aim to confine the damages of malicious Java applets to selective machines, thus, preventing the machines behind an organization's firewall from being attacked by malicious or buggy applets. More concretely, Spout is a distributed Java execution engine that transparently decouples the processing of an incoming applet's application logic from that of graphical user interface (GUI), such that the only part of an applet that is actually running on the requesting user's host is the harmless GUI code. A unique feature of the Spout architecture that does not exist in other similar systems, is that it is completely transparent to and does not require any modifications to WWW browsers or class libraries on the end hosts. This paper describes the detailed design, implementation, and performance measurements of the first Spout prototype, which also incorporates run-time resource monitoring mechanisms to counter denial-of-service attacks.

Similar Papers
  • Conference Article
  • Citations9

Virtual reality testbed for mobile robots

  • Jul 12, 1999
  • D Gracanin +3
  • Conference Article
  • Citations1

Java Security Vulnerability Analysis Based on Java Access Permission Checking Tree

  • Aug 24, 2014
  • Advanced science and technology letters
  • Young-Chan Lim +4
  • Research Article
  • Citations30

Investigating Search Costs and Coordination Costs in Electronic Markets: A Transaction Costs Economics Perspective

  • Aug 01, 2005
  • Electronic Markets
  • Younes Benslimane +2
  • Research Article
  • Citations21

Relationship of WWW usage and employee learning in the casino industry

  • May 23, 2008
  • International Journal of Hospitality Management
  • Joseph D Lema +1
  • Conference Article
  • Citations3

Building Java applets by using DJ-a Java-based constraint language

  • Oct 19, 1999
  • Neng-Fa Zhou
  • Research Article
  • Citations8

Go4 multitasking class library with ROOT

  • Apr 01, 2002
  • IEEE Transactions on Nuclear Science
  • J Adamczewski +6
  • Conference Article
  • Citations5

Impact of World Wide Web, Java, and virtual environments on education in computational science and engineering

  • Nov 06, 1996
  • T Singh +3
  • Conference Article

How Does GUI Testing Exercise Application Logic Functionality?

  • Jul 01, 2017
  • Abdulaziz Alkhalid +1
  • Research Article
  • Citations3

Java applets para um software educacional distribuído em eletrônica de potência

  • Sep 01, 2002
  • Sba: Controle & Automação Sociedade Brasileira de Automatica
  • Flávio A S Gonçalves +1
  • Research Article
  • Citations80

Using Java applets and CORBA for multi-user distributed applications

  • Jan 01, 1997
  • IEEE Internet Computing
  • E Evans +1
  • Conference Article
  • Citations5

Model driven approach for remote laboratory visualization systems

  • Nov 01, 2010
  • A Braune +2
  • Book Chapter

Java, Javascript, and Hot Java

  • Dec 27, 1999
  • Wiley Encyclopedia of Electrical and Electronics Engineering
  • Richard Wikoff +1
  • Research Article

Técnicas de HCI en Interacción con un Entorno 3D para la Representación de los Resultados de la Búsqueda Web

  • Dec 08, 2015
  • SHILAP Revista de lepidopterología
  • Jesús Insuasti Portilla +2
  • Research Article
  • Citations2

Software Development for Programmable Logic Controllers - A Methodology and a System

  • Nov 01, 1992
  • IFAC Proceedings Volumes
  • J.P Estima De Oliveira +3
  • Book Chapter
  • Citations1

Chapter 4.2 - Perspective: Geographical Information Systems

  • Jan 01, 2001
  • Computing the Brain
  • Cyrus Shahabi +1
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.