The Computer Journal Advance Access originally published online on January 25, 2009
The Computer Journal 2009 52(7):824-849; doi:10.1093/comjnl/bxn065
| ||||||||||||||||||||||||||||||||||||||||||||||||
This article appears in the following The Computer Journal issue: Incorporating Profiling Expertise and Behaviour Special Issue [View the issue table of contents]
_SAOP: A Security AOP Calculus1
Computer Security Laboratory (CSL), Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada H3G 1M8
* Corresponding author: debbabi{at}ciise.concordia.ca
Received 7 April 2008; revised 6 October 2008
This paper presents an aspect-oriented calculus for security called
_SAOP. It is based on the
_calculus and contains pointcuts that are relevant to security hardening of applications. The main contribution of the paper is a semantics for
_SAOP advice weaving in the presence of these pointcuts. We instrument the effect-based type inference system to inject advices into expressions during static typing. The proposed semantics for advice weaving is in the spirit of AspectJ, a prominent aspect-oriented programming language, where advices are injected before, after or around the join points that match their respective pointcuts. For this purpose, we accommodate the effect-based inference algorithm to take matching and weaving processes into consideration. In addition, we establish the required soundness and preservation proofs.
Key Words: Security aspect-oriented programming calculus
1 This research is the result of a fruitful collaboration with the Department of National Defense, Bell Canada and the DND/NSERC Research Partnership Program.