• DocumentCode
    2129719
  • Title

    A PEP-PDP Architecture to Monitor and Enforce Security Policies in Java Applications

  • Author

    Elrakaiby, Yehia ; Le Traon, Yves

  • Author_Institution
    Reliability & Trust Interdiscipl. Res. Center, Univ. of Luxembourg, Luxembourg, Luxembourg
  • fYear
    2013
  • fDate
    2-6 Sept. 2013
  • Firstpage
    367
  • Lastpage
    374
  • Abstract
    Security of Java-based applications is crucial to many businesses today. In this paper, we propose an approach to completely automate the generation of a security architecture inside of a target Java application where advanced security policies can be enforced. Our approach combines the use of Aspect-Oriented Programming with the Policy Enforcement Point (PEP) - Policy Decision Point (PDP) paradigm and allows the runtime update of policies.
  • Keywords
    Java; aspect-oriented programming; authorisation; software architecture; Java-based applications; PEP-PDP architecture; access control; aspect-oriented programming; policy enforcement point-policy decision point paradigm; security architecture generation automation; security policies; usage control; Access control; Context; Java; Monitoring; Programming; Runtime; Access Control; Java Security; Obligations; Security Policies;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Availability, Reliability and Security (ARES), 2013 Eighth International Conference on
  • Conference_Location
    Regensburg
  • Type

    conf

  • DOI
    10.1109/ARES.2013.49
  • Filename
    6657265