NDLI: Secure and modular access control with aspects

Please wait, while we are loading the content...

Reify your collection queries for modularity and speed!

Reactive behavior in object-oriented applications: an analysis and a research roadmap

Enhancing design models with composition properties: a software maintenance study

Modular specification and checking of structural dependencies

Specification and verification of event detectors and responses

Secure and modular access control with aspects

Method slots: supporting methods, events, and advices by a single language construct

Supporting data aspects in pig latin

Model-driven adaptive delegation

Using roles to model crosscutting concerns

Past expression: encapsulating pre-states at post-conditions by means of AOP

A typed monadic embedding of aspects

Context traits: dynamic behaviour adaptation through run-time trait recomposition

KFusion: optimizing data flow without compromising modularity

Refactoring delta-oriented software product lines

Aggregation for implicit invocations

A pointcut language for setting advanced breakpoints

On exceptions, events and observer chains

Secure and modular access control with aspects

Content Provider	ACM Digital Library
Author	Tanter, Éric Toledo, Rodolfo
Abstract	Can access control be fully modularized as an aspect? Most proposals for aspect-oriented access control are limited to factoring out access control checks, still relying on a non-modular and ad hoc infrastructure for permission checking. Recently, we proposed an approach for modular access control, called ModAC. ModAC successfully modularizes both the use of and the support for access control by means of restriction aspects and scoping strategies. However, ModAC is only informally described and therefore does not provide any formal guarantee with respect to its effectiveness. In addition, like in many other proposals for aspect-oriented access control, the presence of untrusted aspects is not at all considered, thereby jeopardizing the practical applicability of such approaches. This paper demonstrates that it is possible to fully modularize aspect control, even in the presence of untrusted aspects. It does so by describing a self-protecting aspect that secures ModAC. We validate this result by describing a core calculus for AspectScript, an aspect-oriented extension of JavaScript, and using this calculus to prove effectiveness and non-interference properties of ModAC. Beyond being an important validation for AOP itself, fully modularizing access control with aspects allows access control to be added to other aspect languages, without requiring ad hoc support.
Starting Page	157
Ending Page	170
Page Count	14
File Format	PDF
ISBN	9781450317665
DOI	10.1145/2451436.2451456
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-03-24
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Access control Restriction aspects Scoping strategies Aspect-oriented programming
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in