An aspect-oriented security framework

Providing quality measurement for aspect-oriented software development

“…Current AOSD models aim at drawing an abstract pathway that concentrates on a general purpose modeling procedure within a certain domain, or to support particular NFRs in the system (e.g., performance or security [1,2]). In addition, these approaches do not fully support a smooth transition among the requirements, analysis and the design phases.…”

A model-based aspect-oriented framework for building intrusion-aware software systems

“…By using AOSD, software developers can focus on functional requirements, and, at the same time, well-trained software security engineers can focus on the security issues of the application separately. There are many security concerns addressed by AOSD in the existing work such as access control [6,7], security-flaw fixing [8,5], encryption [9,10], and audit [11,12]. However, there is no research on applying AOSD for intrusion detection.…”

“…The separated concerns are implemented as aspects and woven into the primary functionalities. As cross-cutting concerns, security concerns can be addressed by AOSD with good modularity, reusability, and flexibility [3][4][5]. By using AOSD, software developers can focus on functional requirements, and, at the same time, well-trained software security engineers can focus on the security issues of the application separately.…”

Aspect-Oriented Runtime Monitor Certification

“…The approach is motivated by improved efficiency (since IRMs require fewer context switches than external monitors), deployment flexibility (since in-lining avoids modifying the VM or OS), and precision (since IRMs can monitor internal program operations not readily visible to an external monitor). Most modern IRM systems are implemented using some form of aspect-oriented programming (AOP) [32,28,7,8,14]. Such IRMs are implemented as pointcut -advice pairs: pointcuts identify securityrelevant program operations and advice prescribes local code transformations sufficient to guard such operations.…”