Sciweavers

Share
SERP
2010

Towards Automatic Integration of Or-BAC Security Policies Using Aspects

9 years 5 months ago
Towards Automatic Integration of Or-BAC Security Policies Using Aspects
We propose a formal method to automatically integrate security rules regarding an access control policy (expressed in Or-BAC) in Java programs. Given an untrusted application and a set of Or-BAC security rules, our method derives corresponding AspectJ aspects. Derived aspects modify the behaviour of the underlying program so as to meet the policy. Then, these aspects are weaved into the target program (using the AspectJ compiler). The result is a trusted program on which the security policy is enforced. This approach was applied in order to secure the behaviour of a travel agency application.
Yliès Falcone, Mohamad Jaber
Added 15 Feb 2011
Updated 15 Feb 2011
Type Journal
Year 2010
Where SERP
Authors Yliès Falcone, Mohamad Jaber
Comments (0)
books