60 likes | 171 Views
AAOS 2003: Analysis of Aspect-Oriented Software. Comparison Study of Aspect-Oriented and Container Managed Security. Paweł Słowikowski ps@agh.edu.pl Krzysztof Zieliński kz@agh.edu.pl Department of Computer Science AGH University of Science and Technology , Cracow, Poland. Research.
E N D
AAOS 2003: Analysis of Aspect-Oriented Software Comparison Study of Aspect-Oriented and Container Managed Security Paweł Słowikowski ps@agh.edu.pl Krzysztof Zieliński kz@agh.edu.pl Department of Computer Science AGH University of Science and Technology, Cracow, Poland
Research • Object-oriented and Component-based systems • Java 2 Enterprise Edition (J2EE) • Java Management Extensions (JMX) • CORBA • .. • Domains • Security • Monitoring • ..
Security requirements • Authentication • Access control • Audit
Container managed security enforced by container declarative security in deployment descriptor limited to container’s functionality separated from business logic Aspect-oriented security(with AspectJ) enforced by aspect programmatic security in aspect limited by scope of pointcuts separated from business logic Securityimplementation in J2EE
The paper • Contains examples with source code for • authentication of a client application • RAD based access control • accountability • Java / JAAS / JBoss / AspectJ