基于CAS的代码访问控制研究与实现

Design and Implementation of Code Access Control Based on CAS

对于以组件为中心的软件世界,其安全模型不同于现有的基于用户的安全访问。文章针对网络环境下代码安全问题,阐述了.NET环境下安全的实现机理,研究和分析了CAS和属性的原理,设计了通用授权访问控制模型,实现了基于自定义属性的代码层授权访问控制,保证了应用系统的安全性和灵活性。

In components software world, its security model is different from user - based access control. This paper focuses on code security problem in network, explain security mechanism base on . NET environment, research and analysis CAS and attribute principle, and design common authorization access control model, implement code level authorization access control on customized security attribute, insure application＇ s security and flexibility.