Disambiguating aspect-oriented security policies

AOSD.10 - 9th International Conference on Aspect-Oriented Software Development

Volumn , Issue , 2010, Pages 193-204

  Jones, Micah ^a   Hamlen, Kevin W ^a  

^a UNIVERSITY OF TEXAS AT DALLAS   (United States)

Author keywords

Aspect oriented programming; Declarative languages; Reference monitors

Indexed keywords

ASPECT-ORIENTED; ASPECT-ORIENTED PROGRAMMING; BOOLEAN SATISFIABILITY; CONFLICT DETECTION; DECLARATIVE LANGUAGES; DETECTION ALGORITHM; JOIN POINT; PROGRAM OPERATION; REFERENCE MONITORS; REGULAR LANGUAGES; SECURITY POLICY; SOFTWARE SECURITY;

COMPUTER SOFTWARE; COMPUTER SYSTEMS PROGRAMMING; LINEARIZATION; LINGUISTICS; QUERY LANGUAGES; SECURITY SYSTEMS; XML;

SOFTWARE DESIGN;

EID: 77952273740     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1739230.1739253     Document Type: Conference Paper

References (36)

1. M. Aksit, A. Rensink, and T. Staijen. A graph-transformation-based simulation approach for analysing aspect interference on shared join points. In Proc. of the ACM International Conference on Aspect-Oriented Software Development (AOSD), pages 39-50, Charlottesville, Virginia, March 2009.
2. I. Aktug and K. Naliuka. ConSpec: A formal language for policy specication. In Proc. of the International Workshop on Run Time Enforcement for Mobile and Distributed Systems (REM'07), volume 197-1 of Lecture Notes in Theoretical Computer Science, pages 45-58, Dresden, Germany, September 2007.
3. B. Alpern and F. B. Schneider. Recognizing safety and liveness. Distributed Computing, 2:117-126, 1986.
4. P. Avgustinov, J. Tibble, and O. de Moor. Making trace monitors feasible. In Proc. of the International Conference on Object Oriented Programming, Systems, Languages, and Applications (OOPSLA), Montréal, Canada, 2007.
5. E. Bodden and K. Havelund. Racer: Effective race detection using AspectJ. In Proc. of the International Symposium on Software Testing and Analysis (ISSTA), pages 155-166, Seattle, Washington, 2008.
6. E. Bodden, P. Lam, and L. Hendren. Finding programming errors earlier by evaluating runtime monitors ahead-of-time. In Proc. of the ACM International Symposium on Foundations of Software Engineering (FSE), pages 36-47, Atlanta, Georgia, 2008.
7. F. Chen and G. Roşu. Java-MOP: A Monitoring Oriented Programming environment for Java. In Proc. of the International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS), pages 546-550, Edinburgh, Scotland, April 2005.
8. T. Colcombet and P. Fradet. Enforcing trace properties by program transformation. In Proc. of the ACM Symposium on Principles of Programming Languages (POPL), pages 54-66, Boston, Massachusetts, 2000.
9. C. A. Constantinides, A. Bader, and T. Elrad. Separation of concerns in concurrent software systems. In Proc. of the International Workshop on Aspects and Dimensional Computing at ECOOP, Cannes, France, 2000.
10. D. S. Dantas and D. Walker. Harmless advice. In Proc. of the ACM Symposium on Principles of Programming Languages (POPL), pages 383-396, Charleston, South Carolina, January 2006.
11. D. S. Dantas, D. Walker, G. Washburn, and S. Weirich. AspectML: A polymorphic aspect-oriented functional programming language. ACM Transactions on Programming Languages and Systems, 30(3), 2008.
12. R. Douence, P. Fradet, and M. Südholt. A framework for the detection and resolution of aspect interactions. In Proc. of the ACM Conference on Generative Programming and Component Engineering (GPCE), pages 173-188, October 2002.
13. R. Douence, P. Fradet, and M. Südholt. Composition, reuse and interaction analysis of stateful aspects. In Proc. of the International Conference on Aspect-Oriented Software Development (AOSD), pages 141-150, Lancaster, United Kingdom, March 2004.
14. P. Durr, L. Bergmans, and M. Aksit. Reasoning about semantic conflicts between aspects. In Proc. of the First Aspect, Dependencies, and Interactions Workshop (ADI), pages 10-18, Nantes, France, July 2006.
15. N. Eén and N. Sörensson. MiniSat. http://minisat.se/, 2007.
16. Y. Endoh, H. Masuhara, and A. Yonezawa. Continuation join points. In Proc. of the Foundations of Aspect-Oriented Languages Workshop (FOAL), pages 1-10, Bonn, Germany, 2006.
17. Ú. Erlingsson and F. B. Schneider. SASI enforcement of security policies: A retrospective. In Proc. of the New Security Paradigms Workshop (NSPW), pages 87-95, Caledon Hills, Canada, September 1999.
18. Formal Systems Laboratory (FSL) of the Department of Computer Science at the University of Illinois at Urbana-Champaign (UIUC). JavaMOP 2.0 Finite State Machine (JavaFSM). http://fsl.cs.uiuc.edu/index.php/Special: JavaFSMPlugin2.0.
19. K. W. Hamlen and M. Jones. Aspect-oriented in-lined reference monitors. In Proc. of the ACM Workshop on Programming Languages and Analysis for Security (PLAS), pages 11-20, Tucson, Arizona, June 2008.
20. K. W. Hamlen, G. Morrisett, and F. B. Schneider. Certified in-lined reference monitoring on .NET. In Proc. of the ACM Workshop on Programming Languages and Analysis for Security (PLAS), pages 7-15, June 2006.
21. K. W. Hamlen, G. Morrisett, and F. B. Schneider. Computability classes for enforcement mechanisms. ACM Transactions On Programming Languages And Systems (TOPLAS), 28(1):175-205, January 2006.
22. M. Jones and K. W. Hamlen. Enforcing IRM security policies: Two case studies. In Proc. of IEEE Intelligence and Security Informatics (ISI), pages 214-216, Dallas, Texas, June 2009.
23. S. Kallel, A. Charfi, M. Mezini, M. Jmaiel, and K. Klose. From formal access control policies to runtime enforcement aspects. In Proc. of the International Symposium on Engineering Secure Software and Systems (ESSoS), pages 16-31, Leuven, Belgium, 2009.
24. G. Kiczales, E. Hilsdale, J. Hugunin, M. Kersten, J. Palm, and W. G. Griswold. An overview of AspectJ. In Proc. of the European Conference on Object-Oriented Programming (ECOOP), volume 2072, pages 327-355, Budapest, Hungary, June 2001.
25. C. Kirchner, R. Kopetz, and P.-E. Moreau. Anti-pattern matching. In Proc. of the European Symposium on Programming (ESOP), pages 110-124, Braga, Portugal, March 2007.
26. S. Krishnamurthi and K. Fisler. Foundations of incremental aspect model-checking. ACM Transactions on Software Engineering and Methodology (TOSEM), 16(2), April 2007.
27. R. Laddad. I want my AOP!, part 1. http://www.javaworld.com/javaworld/jw- 01-2002/jw-0118-aspect.html, January 2002.
28. J. Ligatti, L. Bauer, and D. Walker. Edit automata: Enforcement mechanisms for run-time security policies. International Journal of Information Security, 4(1-2):2-16, February 2005.
29. H. Masuhara, G. Kiczales, and C. Dutchyn. A compilation and optimization model for aspect-oriented programs. In Proc. of Compiler Construction, volume 2622 of Springer Lecture Notes in Computer Science, pages 46-60, Warsaw, Poland, April 2003.
30. G. C. Necula. Proof-carrying code. In Proc. of the ACM Symposium on Principles of Programming Languages (POPL), pages 106-119, Paris, France, January 1997.
31. J. Palm, P. Wu, and K. Lieberherr. Understanding aspects through call graph enumeration and pointcut satisfiability. Technical Report NU-CCIS-04-101, College of Computer and Information Science, Northeastern University, Boston, Massachusetts, March 2004.
32. F. B. Schneider. Enforceable security policies. ACM Transactions on Information and System Security (TISSEC), 3(1):30-50, February 2000.
33. M. Sridhar and K. W. Hamlen. ActionScript in-lined reference monitoring in Prolog. In Proc. of the International Symposium on Practical Aspects of Declarative Languages (PADL), pages 149-151, Madrid, Spain, January 2010.
34. M. Sridhar and K. W. Hamlen. Model-checking in-lined reference monitors. In Proc. of the International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI), pages 312-327, Madrid, Spain, January 2010.
35. The AspectJ Team. The AspectJ programming guide. http://www.eclipse.org/ aspectj/doc/released/progguide/index.html, 2003.
36. J. Viega, J. Bloch, and P. Chandra. Applying aspect-oriented programming to security. Cutter IT Journal, 14(2), February 2001.