Secure class resolution, loading and definition

摘要

A method and apparatus for providing security in a computer system is provided. When code associated with an object class must be loaded, a search for the code is performed, inspecting locations in predetermined sequence, where the sequence ensures that untrusted code can not be loaded in place of trusted code. The sequence of locations may include locations specified by a user as well as locations specified by a default pathway. If the class is found and the class has not been loaded, the class is loaded and a set of permissions is associated with the class based on a predetermined mapping of code sources to permissions.