|
|
 |
by L. Koved,
A. J. Nadalin,
D. Neal
and T. Lawson |
 |
 |
 |
Cited references
- M. Zboray, Java--Good Start, but Not Yet
Secure, Gartner Group, Information Security Strategies (ISS)
(December 1996).
- T. Lindholm and F. Yellin, The Java Virtual Machine
Specification, Addison-Wesley Publishing Co., Reading, MA (1997).
- D. Flanagan, Java in a Nutshell: A Desktop
Quick Reference, O'Reilly & Associates, Sebastopol, CA (1997).
- "JavaBeans (1.0),"
http://www.javasoft.com, Sun
Microsystems (1996).
- V. Matena and M. Hapner, "Java Enterprise Beans (0.79),"
http://www.javasoft.com,
Sun Microsystems (1997).
- S. Oaks, Java Security, O'Reilly & Associates,
Sebastopol, CA (1998).
- J. Roskind, "Evolving the Security Model for Java
from Navigator 2.x to Navigator 3.x: setScopePermission,"
http://developer.netscape.com/library/documentation/security/sectn1.html
(1997).
- J. Roskind, "Security Tech Note #2: Activating
Codebase Principals,"
http://developer.netscape.com/library/documentation/security/sectn2.html
(1997).
- The Common Object Request Broker: Architecture and
Specification, Version 2.2, Chapter 13, OMG, Object
Management Group (February 1998).
- J. S. Rothfuss and J. W. Parrett, "Go Ahead, Visit
Those Web Sites, You Can't Get Hurt...Can You?," 20th
National Information Systems Security Conference, sponsored by
NIST and the National Computer Security Center, Baltimore, MD (October
7-10, 1997), pp. 80-94.
- E. W. Felten, D. Balfanz, D. Dean, and D. S.
Wallach, "Web Spoofing: An Internet Con Game," 20th National
Information Systems Security Conference, sponsored by NIST and the
National Computer Security Center, Baltimore, MD (October 7-10, 1997),
pp. 95-103.
- W. Cooke, "Stupid JavaScript Security Tricks," 20th
National Information Systems Security Conference, sponsored by
NIST and the National Computer Security Center, Baltimore, MD (October
7-10, 1997), pp. 116-127.
- R. Kemmerer, F. De Paoli, and A. L. Dos Santos,
"Vulnerability of 'Secure' Web Browsers," 20th National
Information Systems Security Conference, sponsored by NIST and the
National Computer Security Center, Baltimore, MD (October 7-10, 1997),
pp. 488-497.
|
 |
|
|