Towards an Aspect-Oriented Intrusion Detection Framework

A model-based aspect-oriented framework for building intrusion-aware software systems

“…While the related work seek to add protections (access control, encryption) to the target system or change insecure behavior in the target system (flaw fixing), we focus on monitoring the activities of the target system. In [20], we presented the preliminary overview of an aspect-oriented intrusion detection framework. In this work, the intrusion detection aspects are defined over the sequences of observable states, and the state sequences are matched with the attack signature.…”

“…The parameters in this pointcut are the username, the password, and the login HTTP request, req. We declare a before advice associated with the logining pointcut (Lines [18][19][20]. In this advice, we first retrieve the current attack instance from the attackers map or create a new attack instance (Lines [22][23][24][25][26][27], and then pass the username and the password to the attack signature: the getNewState method (Line 29).…”

Enforcing security for desktop clients using authority aspects

“…control and encryption using pointcut-based deployment. Other research has proposed even more advanced scenerios where AOSD is applied to address security [4,6,7,9,16,17,20,25,26,28]. However, most existing tools and research focus on the protection of server-side resources.…”