AOP extension for security testing of programs

Canadian Conference on Electrical and Computer Engineering

Volumn , Issue , 2006, Pages 647-650

  Belblidia, Nadia ^a   Debbabi, Mourad ^a   Hanna, Aiman ^b   Yang, Zhenrong ^a  

^a University of Concordia   (Canada)

^b Civil and Environmental Engineering   (Canada)

Author keywords

AOP; Instrumentation; Pointcut; Security; Testing

Indexed keywords

COMPUTER PROGRAMMING; MATHEMATICAL MODELS;

BUSINESS LOGIC; INSTRUMENTATION; SECURITY TESTING;

SECURITY OF DATA;

EID: 39049153715     PISSN: 08407789     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CCECE.2006.277318     Document Type: Conference Paper

References (27)

1. AspectC++ documentation, http://www.aspectc.org/ Documentation.5.0.html.
2. Linux ftpd SSL Buffer Overflow (Exploit). http://www.securiteam.com/ exploits/6F0021PEKC. html.
3. K. Böllert. On weaving aspects. In International Workshop on A spect-Oriented Programming at ECOOP99.
4. B. DeWin. AOSD is an Enabler for Good Enough Security. http://citeseer.ist.psu.edu/728786.html, 2003.
5. B. DeWin. Engineering Application Level Security through Aspect Oriented Software Development. http://www.cs.kuleuven.ac.be/cwis/research/distrinet/ resources/publications/41140.pdf, 2004.
6. B. DeWin, F. Piessens, W. Joosen, and T. Verhanneman. On the Importance of the Separation-ofConcerns Principle in Secure Software Engineering. Workshop on the Application of Engineering Principles to System Security Design, Boston, MA, USA, November 6-8, 2002, Applied Computer Security Associates (ACSA), 2002.
7. B. DeWin, B. Vanhaute, and B. De Decker. Security Through Aspect-Oriented Programming. In B. De Decker, F. Piessens, J. Smits, and Van Herreweghen, editors, Advances in Network and Distributed Systems Security, pages 125-138, 2001.
8. B. DeWin, B. Vanhaute, and B. De Decker. How Aspect-Oriented Programming Can Help to Build Secure Software. Informatica, 26(2):141-149, 2002.
9. D. Orleans for K. Lieberherr. Adaptive Programming with Traversais and Visitors. www.ccs.neu.edu/research/demeter/posters/ introDemeter Java/poster.html.
10. Demeter Group. Home page. http://www.ccs.neu.edu/research/demeter/.
11. Greg Hoglund. Exploiting software : how to break code. Addison-Wesley, Boston, 2004. Includes bibliographical references (p. 449-451) and index.
12. M. Huang, C. Wang, and L. Zhang. Toward a Reusable and Generic Security Aspect Library. In AOSD:AOSDSEC 04: AOSD Technology for Application-level Security, March 2004.
13. Parasoft Insure++. Home page. http://www.parasoft.com/jsp/products/home. jsp? product=Insure.
14. G. Kiczales, J. Irwin, J. Lamping, J. M. Loingtier, CV. Lopes, C. Maeda, and A. Menhdhekar. AspectOriented Programming. In Mehmet Akşit and Satoshi Matsuoka, editors, ECOOP '97 -Object-Oriented Programming 11th European Conference, Jyväskylä, Finland, volume 1241, pages 220-242. Springer-Verlag, New York, NY, 1997.
15. Gregor Kiczales, Erik Hilsdale, Jim Hugunin, Mik Kersten, Jeffrey Palm, and William Griswold. An Overview of AspectJ. Budapest, 2001. Springer Verlag.
16. Cigital Labs. An Aspect-Oriented Security Assurance Solution. Technical Report AFRL-IF-RS-TR-2003254, Cigital Labs, Dulles, Virginia, USA, 2003.
17. K. Lieberherr, D. Orleans, and J. Ovlinger. AspectOriented Programming with Adaptive Methods. Communications of the ACM, 44(10):39-41, 2001.
18. H. Masuhara and K. Kawauchi. Dataflow Pointcut in Aspect-Oriented Programming. In APLAS, pages 105-121, 2003.
19. H. Ossher and P. Tarr. Multi-Dimensional Separation of Concerns and the Hyperspace Approach. In Proceedings of the Symposium on Software Architectures and Component Technology: The State of the Art in Software Development. Kluwer, 2000.
20. V. Shah and F. Hill. Using Aspect-Oriented Programming for Addressing Security Concerns. In ISSRE2002.
21. Olaf Spinczyk, Andreas Gal, and Wolfgang SchröderPreikschat. AspectC++: An Aspect-Oriented Extension to C++. In Proceedings of the 40th International Conference on Technology of Object-Oriented Languages and Systems, Sydney, Australia, February 2002.
22. Peter Szor. The art of computer virus research and defense. Addison-Wesley, Upper Saddle River, NJ, 2005. Includes bibliographical references and index.; ALT TITLE: Computer virus research and defense.
23. P. Tarr, H. Ossher, and S. M. Sutton. T2: Hyper/j: Multi-dimensional separation of concerns for java. http://trese.cs.utwente.nl/aosd2002/ index.php?content=hyperj, 2002.
24. Peri Tarr and Harold Ossher. Hyper/J User and Installation Manual. IBM T. J. Watson Research Center, Yorktown Heights, NY, USA, 2000.
25. B. Vanhaute and B. DeWin. AOP, Security and Genericity. 1st Belgian AOSD Workshop, Vrije Universiteit Brussel, Brussels, Belgium, November 8, 2001, 2001.
26. B. Vanhaute, B. DeWin, and Bart B. De Decker. Building Frameworks in AspectJ. Workshop on Advanced Separation of Concerns, ECOOP2001.
27. J. Viega, J. T. Bloch, and C. Pravir. Applying AspectOriented Programming to Security. Cutter IT Journal, 14(2):31-39, 2001.