Using dynamic aspects for delegating fine-grained access rights

Proceedings - Asia-Pacific Software Engineering Conference, APSEC

Volumn 2005, Issue , 2005, Pages 783-789

  Chen, Kung ^a  

^a NATIONAL CHENGCHI UNIVERSITY   (Taiwan)

Author keywords

[No Author keywords available]

Indexed keywords

CONTROL SYSTEM ANALYSIS; DYNAMIC PROGRAMMING; SOFTWARE PROTOTYPING;

ASPECTWERKZ; FINE-GRAINED ACCESS RIGHTS; INSTANCE-LEVEL ASPECTS;

INFORMATION RETRIEVAL;

EID: 33847291849     PISSN: 15301362     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/APSEC.2005.111     Document Type: Conference Paper

References (10)

1. K. Chen and C.M. Huang, "A Practical Aspect Framework for Enforcing Fine-Grained Access Control in Web Applications," Proc. of First Information Security Practice and Experience Conference (ISPEC 2005), LNCS 3439, Springer-Verlag, 2005, pp. 156-167.
2. K. Chen and C.M. Huang, "On Designing Access Control Aspect for Web Applications", Workshop on Software-engineering Properties of Languages and Aspect Tehchnologies (SPLAT 05), Mar. 2005.
3. The Apache Struts Web Application Framework: http://struts.apache.org/
4. L. Zhang, G. Ahn, and B. Chu, "A Rule-Based Framework for Role-Based Delegation and Revocation," ACM Transactions on Information and System Security, Aug. 2003, pp. 404-441.
5. JBoss AOP project; http://www.jboss.org/products/aop
6. AspectWerkz project; http://aspectwerkz.codehaus.org
7. H. Rajan and K. Sullivan, "Eos: Instance-Level Aspects for Integrated System Design ", Proc. of the 2003 Joint European Software Engineering Conference and ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE 2003), Sept. 2003.
8. S. Hanenberg and A. Schmidmeier, "Idioms for Building Software Frameworks in AspectJ," 2nd AOSD Workshop on Aspects, Components, and Patterns for Infrastructure Software (ACP4IS), Mar. 2003.
9. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman, "Role-based access control model," IEEE Computer, Feb. 1996, pp. 38-47.
10. X. Zhang, S. Oh, and R. Sandhu, "PBDM: A Flexible Delegation Model in RBAC," Proc. 8th Symposium on Access Control Models and Technologies, 2003, pp. 149-157.