Aspects of Security

良好的实践要求从一开始就将安全性和其他非功能需求考虑到系统设计中。实际上，遗留代码的问题以及由于监管或立法框架的变化而导致的需求变化需要更灵活的方法。安全策略通常需要重新调整。面向方面编程支持的关注点分离允许这样的改装，而不必完全重新设计系统。该建议是为了对丹麦技术大学进行一系列短期访问，以进一步推进使用方面在分布式移动系统上执行安全策略的联合工作。我们过去工作的一个主要成果是将方面集成到一种协调语言中，这种语言促进了数据的分发、代码的可移动性，以及与动态发展的开放系统一起工作的能力。我们将这种语言应用到一个案例研究中，该研究基于澳大利亚一家小型养老院的电子病历。我们已经展示了如何对这个示例的访问控制策略进行编码，并定义了一个新的逻辑来验证这些策略的正确性。计划中的一系列访问的主要成果是：更复杂的面向方面的编程方法，包括动态程序分析；策略推理逻辑的自动化；进一步的个案研究；以及语言的扩展。

Good practice requires that security and other non-functional requirements are factored into a system design from the very start. In reality, the issues of legacy code and changing requirements due to changes in the regulatory or legislative framework require a more flexible approach. Security policies often have to be retro-fitted. The separation of concerns supported by aspect-oriented programming allows such retro-fitting without having to completely re-engineer the system.This proposal is for a series of short visits to the Danish Technical University to further advance joint work using aspects to enforce security policies on distributed, mobile systems.One main result from our past work is the integration of aspects into a coordination language that facilitates distribution of data, mobility of code, and the ability to work with dynamically evolving, open systems. We have applied this language to a case study based on electronic patient records for a small nursing home in Australia. We have shown how to encode the access control policies of this example and defined a new logic for verifying the correctness of such policies. The main outcomes from the planned series of visits are: a more sophisticated approach to aspect-oriented programming which includes dynamic program analysis; automation of the logic for reasoning about policies; further case studies; and extensions to the language.