A Framework for Analyzing Composition of Security Aspects

The methodology of aspect-oriented software engineering has been proposed to factor out concerns that are orthogonal to the core functionality of a system. In particular, this is a useful approach to handling the difficulties of integrating non-functional requirements such as security into complex software systems. Doing so correctly and securely, however, still remains a non-trivial task. For example, one has to make sure that the "weaving" process actually enforces the aspects needed. This is highly non-obvious especially in the case of security, since different security aspects may actually contradict each other, in which case they cannot be woven in a sequential way without destroying each other. To address these problems, this paper introduces a framework for the aspect-oriented development of secure software using composition filters at the model level. Using an underlying foundation based on streamprocessing functions, we explore under which conditions security propert...

• Type: Conference
• Year: 2006
• Where: DAGSTUHL
• Authors: Jorge Fox, Jan Jürjens
• Keywords: Aspect-oriented Software Engineering, DAGSTUHL 2006, DAGSTUHL 2007, Model Level, Security