【摘要】 动态类加载是Java的一个重要功能,它支持Java在运行时安装程序组件。Java的动态加载具有惰性加载、用户自定义加载策略以及动态名字空间等新特征。本文详细讨论了Java的动态加载机制,研究了动态加载与Java平台安全性之间的关系,分析了针对类加载的典型攻击,讨论了形式化验证的方法和存在的相应问题,最后总结全文并指出进一步研究的方向。更多还原

【Abstract】 Dynamic class loading is a novel and powerful mechanism of Java. It supports installing software compo- nents at runtime. Java allows lazy, dynamic loading of classes according to user-definable policies, and a form of name space separation using class loaders. In the paper, we present the notion of Java class loading in detail. We show how class loading is closely related to the security of Java platform and analyze typical attacks on loading. We also present formalizations of class loading and show the existing problems of these works. We propose the future research at last.更多还原