Combining static analysis and runtime checking in security aspects for distributed tuple spaces

  • Authors:

  • Fan Yang;Tomoyuki Aotani;Hidehiko Masuhara;Flemming Nielson;Hanne Riis Nielson

  • Affiliations:

  • DTU Informatics, Technical University of Denmark;School of Information Science, Japan Advanced Institute of Science and Technology;Graduate School of Arts and Sciences, University of Tokyo;DTU Informatics, Technical University of Denmark;DTU Informatics, Technical University of Denmark

  • Venue:
  • COORDINATION'11 Proceedings of the 13th international conference on Coordination models and languages
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Enforcing security policies to distributed systems is difficult, in particular, to a system containing untrusted components. We designed AspectKE*, an aspect-oriented programming language based on distributed tuple spaces to tackle this issue. One of the key features in AspectKE* is the program analysis predicates and functions that provide information on future behavior of a program. With a dual value evaluation mechanism that handles results of static analysis and runtime values at the same time, those functions and predicates enable the users to specify security policies in a uniform manner. Our two-staged implementation strategy gathers fundamental static analysis information at loadtime, so as to avoid performing all analysis at runtime. We built a compiler for AspectKE*, and successfully implemented security aspects for a distributed chat system and an electronic healthcare record workflow system.