An aspect-oriented approach to declarative access control for web applications

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3841 LNCS, Issue , 2006, Pages 176-188

  Chen, Kung ^a   Lin, Ching Wei ^a  

^a NATIONAL CHENGCHI UNIVERSITY   (Taiwan)

Author keywords

[No Author keywords available]

Indexed keywords

LOGIC PROGRAMMING; SECURITY OF DATA; TRANSLATION (LANGUAGES); WORLD WIDE WEB; XML;

ACCESS CONTROL; ASPECT-ORIENTED APPROACH; TRANSLATION SCHEME; WEB APPLICATIONS;

TELECOMMUNICATION SERVICES;

EID: 33745677838     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11610113_17     Document Type: Conference Paper

References (17)

1. The Apache Struts Web Application Framework: http://struts.apache.org/
2. Beznosov, K. and Deng, Y., Engineering Application-level Access Control in Distributed Systems, in Handbook of Software Engineering and Knowledge Engineering, Vol. 1., 2002.
3. Chen, K. and Huang, C.H., A Practical Aspect Framework for Enforcing Fine-Grained Access Control in Web Applications, First Information Security Practice and Experience Conference (ISPEC 2005), LNCS 3439, pp. 156-167.
4. De Win, B., Piessens, F., Joosen, W. and Verhanneman, T., On the importance of the separation-of-concerns principle in secure software engineering, Workshop on the Application of Engineering Principles to System Security Design, 2002.
5. De Win, B., Vanhaute, B. and De Decker, B., Security Through Aspect-Oriented Programming, Advances in Network and Distributed Systems Security, Kluwer Academic, pp. 125-138, 2001.
6. Fonseca, C.A., Extending JAAS for Class Instance-Level Authorization. IBM DeveloperWorks, April 2002. http://www-106.ibm.com/developerworks/java/library/ j-jaas/
7. Gamma, Helm, Johnson and Vlissides, Design Patterns. Addison-Wesley, 1995.
8. Goodwin, R., Goh, S.F., and Wu, F.Y., Instance-level access control for business-to-business electronic commerce, IBM System Journal, vol. 41, no. 2, 2002.
9. rd International Conference on Aspect-Oriented Software Development, Lancaster, 2004, pp. 26-35.
10. Kiczales, G., Lamping, J., Menhdhekar, A., Maeda, C., Lopes, C., Loingtier, J.-M., and Irwin, J., Aspect-Oriented Programming, in ECOOP '97, LNCS 1241, pp. 220-242.
11. Kiczales, G., Hilsdale, E., Hugunin, J., Kersten, M., Palm, J., and Griswold, W.G., Getting Started with AspectJ, Communications of ACM, vol. 44, no. 10, pp. 59-65, Oct. 2001.
12. Lin, C.W., An Aspect-Oriented Approach to Fine-Grained Access Control for Web Applications, M.S. Thesis, National Chengchi University, July, 2005.
13. Open Web Application Security Project: The Top Ten Most Critical Web Application Security Vulnerabilities. http://www.owasp.org/documentation/topten
14. Probst, S. and Kueng, J., The Need for Declarative Security Mechanisms, IEEE Proceedings of the 30th EUROMICRO Conference (EUROMICRO'04), Aug. 2004.
15. Sandhu, R., Coyne, E., Feinstein, H., and Youman, C., Role-Based Access Control Models, IEEE Computer, 29(2):38-47, 1996.
16. Sun Microsystems, Java Authentication and Authorization Service (JAAS), http://java.sun.com/products/jaas/index.jsp
17. Sun Microsystem, Java 2 Platform, Enterprise Edition (J2EE), http://java.sun.com/j2ee/