Aspects of Security

良好的实践要求从一开始就将安全性和其他非功能需求考虑到系统设计中。在现实中，遗留代码和因法规或立法框架的变化而改变的要求的问题需要更灵活的办法。安全政策往往需要重新调整。面向方面编程支持的关注点分离允许这种重新调整，而不必完全重新设计系统。这项建议是对丹麦技术大学的一系列短期访问，以进一步推进使用方面在分布式移动系统上执行安全策略的联合工作。我们过去工作的一个主要结果是将方面集成到一种协调语言中，该语言有助于数据的分发、代码的移动性以及使用动态演变的开放系统的能力。我们已经将这种语言应用于基于澳大利亚一家小型疗养院的电子患者记录的案例研究。我们已经展示了如何对此示例的访问控制策略进行编码，并定义了用于验证这些策略的正确性的新逻辑。计划中的一系列访问的主要成果是：更复杂的面向方面编程方法，包括动态程序分析；关于政策推理的逻辑自动化；进一步的案例研究；以及对语言的扩展。

Good practice requires that security and other non-functional requirements are factored into a system design from the very start. In reality, the issues of legacy code and changing requirements due to changes in the regulatory or legislative framework require a more flexible approach. Security policies often have to be retro-fitted. The separation of concerns supported by aspect-oriented programming allows such retro-fitting without having to completely re-engineer the system.This proposal is for a series of short visits to the Danish Technical University to further advance joint work using aspects to enforce security policies on distributed, mobile systems.One main result from our past work is the integration of aspects into a coordination language that facilitates distribution of data, mobility of code, and the ability to work with dynamically evolving, open systems. We have applied this language to a case study based on electronic patient records for a small nursing home in Australia. We have shown how to encode the access control policies of this example and defined a new logic for verifying the correctness of such policies. The main outcomes from the planned series of visits are: a more sophisticated approach to aspect-oriented programming which includes dynamic program analysis; automation of the logic for reasoning about policies; further case studies; and extensions to the language.