ScienceDirect® Home Skip Main Navigation Links
You have guest access to ScienceDirect. Find out more.
 
Home
Browse
My Settings
Alerts
Help
 Quick Search
 Search tips (Opens new window)
    Clear all fields    
advertisementadvertisement
Computer Networks and ISDN Systems
Volume 29, Issues 8-13, September 1997, Pages 927-938
Papers from the Sixth International World Wide Web Conference
 
Font Size: Decrease Font Size  Increase Font Size
 Abstract - selected
Purchase PDF (2736 K)

  E-mail Article   
  Add to my Quick Links   
Bookmark and share in 2collab (opens in new window)
Request permission to reuse this article
  Cited By in Scopus (0)
 
 
 
Related Articles in ScienceDirect
View More Related Articles
 
View Record in Scopus
 
doi:10.1016/S0169-7552(97)00054-8    How to Cite or Link Using DOI (Opens New Window)
Copyright © 1997 Published by Elsevier Science B.V.

High security Web servers and gateways

Nigel Edwards Corresponding Author Contact Information, E-mail The Corresponding Author and Owen Rees E-mail The Corresponding Author

Hewlett-Packard Laboratories, Bristol, Filton Road, Stoke Gifford, Bristol, UK BS12 6QZ

Available online 14 May 1998.

Purchase the full-text article



References and further reading may be available for this article. To view references and further reading you must purchase this article.

Abstract

This paper describes a high security, high performance system for making legacy systems accessible to the web. It combines distributed object technology with a trusted operating system that implements multi-level security. The aim is to satisfy the growing demand for dynamic content generation, while providing a high level of protection against unauthorized access to the service.

HP CORBAweb is a software infrastructure that allows access to CORBA applications from the web. HP VirtualVault is a secure environment for web applications. The paper gives overviews of both VirtualVault and CORBAweb, and describes the object gateway that merges the integration features of CORBAweb with the security of VirtualVault.

The paper describes the authorization model that determines the granularity at which access is granted. It then goes on to explain how the system can be extended to allow remote clients, such as Java applets, to invoke the CORBA-based services directly, using the Internet Inter-ORB Protocol (IIOP).

The object gateway is designed to be used to provide controlled access through a firewall protecting the servers. Some of the issues associated with firewalls around the clients are discussed at the end of the paper.

Author Keywords: Author Keywords: Security; Gateways; Trusted operating system; Multilevel security; CORBA; Distributed objects; World Wide Web

Article Outline

• References

Computer Networks and ISDN Systems
Volume 29, Issues 8-13, September 1997, Pages 927-938
Papers from the Sixth International World Wide Web Conference
 
Home
Browse
My Settings
Alerts
Help
Elsevier.com (Opens new window)
About ScienceDirect  |  Contact Us  |  Information for Advertisers  |  Terms & Conditions  |  Privacy Policy
Copyright © 2008 Elsevier B.V. All rights reserved. ScienceDirect® is a registered trademark of Elsevier B.V.