Security Aspects: A Framework for Enforcement of Security Policies Using AOP

The secure deployment of an application requires the definition of the security properties that it should meet. This is typically performed on the basis of a security policy, which aims at providing a concrete view of security requirements to the application developer. In this paper, we propose a framework to manage security policies that could be associated with applications based on an AOP approach. The paper shows mainly how different aspects types can be generated using the knowledge defined within the security policies. Besides, it proposes an approach to weave the generated aspects within application code.