80 likes | 132 Views
Towards Higher Assurance Software Construction via Aspects Thomas Llansó, Inventor. Background. Software is ever more complex Determining correctness very challenging What about software security functions? Are they correct and properly integrated ?
E N D
Towards Higher Assurance Software Construction via AspectsThomas Llansó, Inventor
Background • Software is ever more complex • Determining correctness very challenging • What about software security functions? • Are they correct and properly integrated? • Often we hire independent labs to find out • Employ an evaluation process (e.g., “Common Criteria”) • Can be slow and costly (>6 months, >$100k)
Roots of the Problem • Painful Integration • Security code… • cuts across systems • mixed in with application code • hard to evolve over time • Integration via non-specialists • Painful Evaluation • Manual, slow tracing • Extra scrutiny due to pedigree • Repeat as system evolves
faster evaluations • lower costs • What we want • improved security • easier integration • What if we had a tool that could... • Automatically integrate security code • Enforce separation of duties • Allow automated tracing requirements ↔ security code ↔ application code …even as software changes over time?
Underlying Technology Key technologies/techniques in tool • Requirements Taxonomy • Aspects (from Aspect-Oriented programming) • Marker Annotations • XML for mappings / representation
Technology Applications • Many stakeholders may find use for the tool
Commercial Opportunities • For technical information contact: Thomas Llanso, Inventor 443-778-6343 thomas.llanso@jhuapl.edu • For licensing information contact: Norma Lee Todd, Technology Manager Office of Technology Transfer The Johns Hopkins University Applied Physics Laboratory 11100 Johns Hopkins Road Laurel, MD 20723 443-778-4528 norma.todd@jhuapl.edu www.jhuapl.edu/ott