Security Paramount

[ahsan786]

Hi,
There is a server that is designed to take programming files from the
client and then run them on the machine.
The languages that may be used are: c, c++, java
Now the challenge is how to make the system secure.

here is some ideas that were introduced through some discussions with some friends:
1. look for keywords.
2. do not let the clients get out of their assigned directory.

problem with 1: a lot of update of keywords that may be dangerous to the machine.
plus there is usually a way around it to jeapordise the system.

problem with 2: actually this problem was nearly solved had the system
be running on unix, but the programs are run using dos prompts. the
solution discussed was that do not let the client get out of their
assigned directory and thus it does not effect the system.

Do you experts have any idea?

thank you.

 

[sedj]

Why not use a distributed system such as RMI with with you can make remote calls within the confines of a SecurityManager object ?

No idea what the C version of this would be - maybe CORBA.

Accepting byte/binary executable files over a network and executing them is insane. I mean INSANE. Only a fool would do that.

--------------------------------------------------
Free Database Connection Pooling Software

http://www.primrose.org.uk