© 2003 by British Computer Society
Re-engineering Security as a Crosscutting Concern
1 School of Mathematical and Computing Sciences, Victoria University of Wellington, New Zealand Email: ian.welch@vuw.ac.nz 2 Centre for Software Reliability, School of Computing Science, University of Newcastle upon Tyne, UK
We have re-engineered a third-party application using a reflective security architecture that allows security to be treated as a crosscutting concern. This has resulted in a considerable reduction in tangling between application code and security code. Prior to the re-engineering, the application was secured using a conventional approach based upon the application of inheritance and the proxy pattern, and we are thus able to compare both approaches. Our experience highlights some general points that are applicable to any attempt to engineer security using advanced separation of concerns technology and some possible improvements to Kava, used to implement the crosscutting concerns.