Aspects and class-based security: a survey of interactions between advice weaving and the Java 2 security model

Authors:
Andreas Sewe;Christoph Bockisch;Mira Mezini
Affiliations:
Technische Universität Darmstadt, Darmstadt, Germany;Technische Universität Darmstadt, Darmstadt, Germany;Technische Universität Darmstadt, Darmstadt, Germany
Venue:
Proceedings of the 2nd Workshop on Virtual Machines and Intermediate Languages for emerging modularization mechanisms
Year:
2008

Citing 10
Cited 2

Dynamic class loading in the Java virtual machine

Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Implementing jalapeño in Java

Proceedings of the 14th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Java Virtual Machine Specification

Java Virtual Machine Specification
The Java Language Specification

The Java Language Specification
JAsCo: an aspect-oriented approach tailored for component based software development

Proceedings of the 2nd international conference on Aspect-oriented software development
An Overview of AspectJ

ECOOP '01 Proceedings of the 15th European Conference on Object-Oriented Programming
Advice weaving in AspectJ

Proceedings of the 3rd international conference on Aspect-oriented software development
Optimising aspectJ

Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation
How secure is AOP and what can we do about it?

Proceedings of the 2006 international workshop on Software engineering for secure systems
Going beyond the sandbox: an overview of the new security architecture in the javaTM development Kit 1.2

USITS'97 Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems

A permission system for secure AOP

Proceedings of the 9th International Conference on Aspect-Oriented Software Development
Towards Security Assurance in Round-Trip Engineering: A Type-Based Approach

Electronic Notes in Theoretical Computer Science (ENTCS)

Quantified Score

Hi-index	0.00

Visualization

Abstract

Various aspect-oriented languages, e.g., AspectJ, Aspect-Werkz, and JAsCo, have been proposed as extensions to one particular object-oriented base language, namely Java. But these extensions do not fully take the interactions with the Java 2 security model into account. In particular, the implementation technique of advice weaving gives rise to two security issues: the erroneous assignment of aspects to protection domains and the violation of namespace separation. Therefore, a comprehensive discussion of the design choices available with respect to interactions with the dynamic class loading facilities of the Java VM is provided.