Monitoring of Security Properties Using BeepBeep

Abstract

Runtime enforcement is an effective method to ensure the compliance of program with user-defined security policies. In this paper we show how the stream event processor tool BeepBeep can be used to monitor the security properties of Java programs. The proposed approach relies on AspectJ to generate a trace capturing the program's runtime behavior. This trace is then processed by BeepBeep, a complex event processing tool that allows complex data-driven policies to be stated and verified with ease. Depending on the result returned by BeepBeep, AspectJ can then be used to halt the execution or take other corrective action. The proposed method offers multiple advantages, notable flexibility in devising and stating expressive user-defined security policies.

Explainable Queries over Event Logs

“…BeepBeep is a Java library that allows users to easily ingest and transform event streams of various types; the library is free and open source6. Over the past few years, BeepBeep has been involved in a variety of case studies [1], [3], [14], [18], [30]. A detailed description of BeepBeep is out of the scope of this paper, due to space restrictions.…”