中国科学院软件研究所机构知识库
Advanced  
ISCAS OpenIR  > 中科院软件所  > 中科院软件所
题名:
CORBA防火墙的一种实现——IIOPProxy
作者: 潘晓峰
答辩日期: 2000
专业: 计算机应用技术
授予单位: 中国科学院软件研究所
授予地点: 中国科学院软件研究所
学位: 博士
关键词: 分布式对象系统 ; 防火墙 ; 代理服务器
摘要: 分布式对象系统是由一组互相操作的对象所组成,是开发分布式计算机网络应用系统的一种有效手段。CORBA标准定义了一种对象间互操作的机制,但到目前为止,尚未考虑防火墙对CORBA应用的限制。本文分析了CORBA的防火墙问题及其现有的实现技术,提出了一个新的CORBA防火墙问题解决方案。该方案不仅解除了防火墙对CORBA应用的限制,而且还提供了一种访问控制的手段,从而保证CORBA对象免受黑客的攻击。根据这个方案,实现了一种CORBA防火墙-IIOPPrxoy。IIOPPrxoy的通用性好,能支持各种不同厂商的ORB,还支持对回调对象和运行时生成的对象的过滤。IIOPPrxoy的适用范围比较广,它既可以在服务端使用,也可以在客户端使用。IIOPPrxoy的透明性比较强,使得CORBA对象根本不知道IIOPPrxoy的存在,故不用改变CORBA对象的行为,而只需要防火墙管理员将代理信息加入对象的IOR中,同时生成一个包含这些信息的配置文件即可。
英文摘要: Distributed object system consisting of interoperable objects is an effective method of developing a distributed system. CORBA defines a mechanism of interoperation between objects. However, CORBA doesn't consider limits imposed on CORBA applications by firewall. At first, this thesis analyses problems of firewalls in CORBA applications and current corresponding solutions. After that, it gives a new and effective solution. This solution not only releases the limit imposed on CORBA applications by firewall, but also provides an access control policy. So CORBA objects are immune to attacks by hackers. According to this solution, we have implemented the IIOPProxy which is a type of CORBA firewall. The IIOPProxy supports different vendors'ORB. And it also supports filtering of callback objects and objects created in run-time. The IIOPProxy is used widely, for example, it can be used in both client side and server side. The biggest difference between the IIOPProxy and other CORBA firewalls is transparency. CORBA objects don't know existence of the IIOPProxy at all. So behavior of CORBA objects needn't be changed for the IIOPProxy. An administrator of the IIOPProxy only need take the following action: adding proxy information into objects' IORs and configuring the IIOPProxy with this information.
语种: 中文
内容类型: 学位论文
URI标识: http://ir.iscas.ac.cn/handle/311060/6872
Appears in Collections:中科院软件所

Files in This Item:
File Name/ File Size Content Type Version Access License
LW002139.pdf(1195KB)----限制开放-- 联系获取全文

Recommended Citation:
潘晓峰. CORBA防火墙的一种实现——IIOPProxy[D]. 中国科学院软件研究所. 中国科学院软件研究所. 2000-01-01.
Service
Recommend this item
Sava as my favorate item
Show this item's statistics
Export Endnote File
Google Scholar
Similar articles in Google Scholar
[潘晓峰]'s Articles
CSDL cross search
Similar articles in CSDL Cross Search
[潘晓峰]‘s Articles
Related Copyright Policies
Null
Social Bookmarking
Add to CiteULike Add to Connotea Add to Del.icio.us Add to Digg Add to Reddit
所有评论 (0)
暂无评论
 
评注功能仅针对注册用户开放,请您登录
您对该条目有什么异议,请填写以下表单,管理员会尽快联系您。
内 容:
Email:  *
单位:
验证码:   刷新
您在IR的使用过程中有什么好的想法或者建议可以反馈给我们。
标 题:
 *
内 容:
Email:  *
验证码:   刷新

Items in IR are protected by copyright, with all rights reserved, unless otherwise indicated.

 

 

Valid XHTML 1.0!
Copyright © 2007-2017  中国科学院软件研究所 - Feedback
Powered by CSpace