Zás. An Aspect-Oriented Access Control Framework

• Autor(a) principal: Zenida, Paulo
• Data de Publicação: 2007
• Tipo de documento: Dissertação
• Idioma: eng
• Título da fonte: Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
• Texto Completo: http://hdl.handle.net/10071/668
• topic: Access control; Authorization; Aspect oriented programming; Controlo de acesso; Autorização; Programação orientada para aspectos

Traditionally, access control system architectures are based on the abstract reference monitor model proposed by Anderson, which tries to separate the access control logic from the logic of applications. The implementation of this model has been difficult since access control presents itself as a crosscutting concern, i.e., it crosscuts the functionalities of aplications. However, the developments of the techniques that support the separation of concerns, particularly aspect oriented programming, have been enabling the development of systems in which the access control code is not scattered through the code of the application. Nevertheless, these solutions are still too specific to a given application. This work presents an access control framework for Java applications, named Z´as, which can be reused and that applies the abstract reference monitor proposed by Anderson. This framework supports access control policies using different kinds of context information and allows them to be changed at runtime. Z´as was developed in the aspect oriented programming language AspectJ and it uses Java 5 annotations. We used Z´as in several small applications since its inception, so as to gain experience and insight from its application. Nevertheless, to evaluate the performance and applicability of the final version of the Z´as framework prototype, we integrated it in a very large Web application called F´enix, which brought us very interesting results, such as showing the easiness of applicating Z´as to already existing applications, and also the main caveats and limitations of Z´as.