目录 1. Introduction2
2. Overview of CORBA2
3. CORBA Security Service5
3.1 Security Threats5
3.2 CORBA Security Reference Model6
3.2.1 Authentication and Identification7
3.2.2 Access Control8
3.2.3 Message Protection9
3.2.4 Auditing10
3.2.5 Delegation10
3.2.6 Non-repudiation14
4. CORBA Security Interoperability15
4.1 Interoperability15
4.2 CORBA Interoperability Model16
5. CORBA Firewall17
6. CORBA Security Management18
7. Conclusion19
References21 参考资料 [ALP00] A. Alireza, U.Lang, M. Padelis, R.Schreiner, and M. Schumacher. "The Challenges of CORBA Security," Informatik Aktuell, Springer-Verlag, 2000.
[BEZ99] K. Beznosov, Y. Deng. "A Framework for Implementing Role-based Access Control Using CORBA Security Service," Proceedings of the Fourth ACM Workshop on Role-based access control , 1999.
[GOL98] D. Gollmann, U. Lang. "Security in CORBA based Electronic Commerce Systems," Elsevier Science, Information Security Technical Report, vol. 3, no. 2, 1998.
[HOQ98] R. Hoque. "CORBA 3," IDG Books Worldwide Inc., Page 53-67, 143-195, 1998.
[LAN99] U. Lang. "CORBA Security on the Web, An Overview," Future Generation Computer Systems, vol. 16, no. 4, 2000.
[LAN00] U. Lang. "Flexibility and Interoperability in CORBA Security," Electronic Notes in Theoretical Computer Science, Volume 32, 2000.
[LGS01] U. Lang, D. Gollmann, R. Schreiner. "Security Attributes in CORBA," IEEE Symposium on Security and Privacy, 2001.
[MOW95] T. J. Mowbray, R. Zahavi. “The Essential CORBA,” John Wiley

The Common Object Request Broker Architecture (CORBA) is a standard framework for distributed object computing. We know security is a major concern in modern computing and communication systems. The extensive use of distributed object increases the complexity of security problem. When the software developers are working on a CORBA-based system, they should take security issues into consideration. Without security protection, a CORBA system will face security challenges. To secure a CORBA system, there are some security measures to take, such as authentication and identification, access control, message protection, auditing, delegation, non-repudiation and firewalls. With these security measures, it is possible to achieve a maximum protection of a CORBA system.