Integrating security in the CORBA architecture

Abstract

In this article, we propose a distributed security architecture for incorporation into object-oriented distributed computing systems, and in particular, into OMG's CORBA architecture. The primary objective of the security architecture is to make CORBA resilient to malicious attacks. The core of the architecture is the notion of secure ORB nodes, which are ORB nodes enhanced with `pluggable' security system objects interacting through generic security service APIs. Security system objects coupled with protocols facilitate among them the creation and management of clients, objects, and security information, as well as the provision of security services, such as client/object authentication, access control, integrity, and confidentiality protections.