Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces

Fan Yang; Tomoyuki Aotani; Hidehiko Masuhara; Flemming Nielson; Hanne Riis Nielson

doi:10.1007/978-3-642-21464-6_14

Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces

Fan Yang, Tomoyuki Aotani, Hidehiko Masuhara, Flemming Nielson, Hanne Riis Nielson

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

Enforcing security policies to distributed systems is difficult, in particular, to a system containing untrusted components. We designed AspectKE*, an aspect-oriented programming language based on distributed tuple spaces to tackle this issue. One of the key features in AspectKE* is the program analysis predicates and functions that provide information on future behavior of a program. With a dual value evaluation mechanism that handles results of static analysis and runtime values at the same time, those functions and predicates enable the users to specify security policies in a uniform manner. Our two-staged implementation strategy gathers fundamental static analysis information at load-time, so as to avoid performing all analysis at runtime. We built a compiler for AspectKE*, and successfully implemented security aspects for a distributed chat system and an electronic healthcare record workflow system.

Original language	English
Title of host publication	Coordination Models and Languages : 13th International Conference, COORDINATION 2011, Reykjavik, Iceland, June 6-9, 2011 - Proceedings
Volume	6721
Publisher	Springer
Publication date	2011
Pages	202-218
ISBN (Print)	878-3-642-21463-9
DOIs	https://doi.org/10.1007/978-3-642-21464-6_14
Publication status	Published - 2011
Event	13th International Conference on Coordination Models and Languages - Reykjavik, Iceland Duration: 6 Jun 2011 → 9 Jun 2011 Conference number: 13 http://discotec.ru.is/coordination/main

Conference

Conference	13th International Conference on Coordination Models and Languages
Number	13
Country/Territory	Iceland
City	Reykjavik
Period	06/06/2011 → 09/06/2011
Internet address	http://discotec.ru.is/coordination/main

Series	Lecture Notes in Computer Science
ISSN	0302-9743

Access to Document

10.1007/978-3-642-21464-6_14

OpenUrl availability

Full text

Cite this

Yang, F., Aotani, T., Masuhara, H., Nielson, F., & Nielson, H. R. (2011). Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces. In Coordination Models and Languages: 13th International Conference, COORDINATION 2011, Reykjavik, Iceland, June 6-9, 2011 - Proceedings (Vol. 6721, pp. 202-218). Springer. Lecture Notes in Computer Science https://doi.org/10.1007/978-3-642-21464-6_14

@inproceedings{8b254c9c86534cc8ac839dc676123bb2,

title = "Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces",

abstract = "Enforcing security policies to distributed systems is difficult, in particular, to a system containing untrusted components. We designed AspectKE*, an aspect-oriented programming language based on distributed tuple spaces to tackle this issue. One of the key features in AspectKE* is the program analysis predicates and functions that provide information on future behavior of a program. With a dual value evaluation mechanism that handles results of static analysis and runtime values at the same time, those functions and predicates enable the users to specify security policies in a uniform manner. Our two-staged implementation strategy gathers fundamental static analysis information at load-time, so as to avoid performing all analysis at runtime. We built a compiler for AspectKE*, and successfully implemented security aspects for a distributed chat system and an electronic healthcare record workflow system.",

author = "Fan Yang and Tomoyuki Aotani and Hidehiko Masuhara and Flemming Nielson and Nielson, {Hanne Riis}",

year = "2011",

doi = "10.1007/978-3-642-21464-6_14",

language = "English",

isbn = "878-3-642-21463-9",

volume = "6721",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "202--218",

booktitle = "Coordination Models and Languages",

note = "13th International Conference on Coordination Models and Languages, COORDINATION 2011 ; Conference date: 06-06-2011 Through 09-06-2011",

url = "http://discotec.ru.is/coordination/main",

}

Yang, F, Aotani, T, Masuhara, H, Nielson, F & Nielson, HR 2011, Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces. in Coordination Models and Languages: 13th International Conference, COORDINATION 2011, Reykjavik, Iceland, June 6-9, 2011 - Proceedings. vol. 6721, Springer, Lecture Notes in Computer Science, pp. 202-218, 13th International Conference on Coordination Models and Languages, Reykjavik, Iceland, 06/06/2011. https://doi.org/10.1007/978-3-642-21464-6_14

Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces. / Yang, Fan; Aotani, Tomoyuki; Masuhara, Hidehiko et al.
Coordination Models and Languages: 13th International Conference, COORDINATION 2011, Reykjavik, Iceland, June 6-9, 2011 - Proceedings. Vol. 6721 Springer, 2011. p. 202-218 (Lecture Notes in Computer Science).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces

AU - Yang, Fan

AU - Aotani, Tomoyuki

AU - Masuhara, Hidehiko

AU - Nielson, Flemming

AU - Nielson, Hanne Riis

N1 - Conference code: 13

PY - 2011

Y1 - 2011

N2 - Enforcing security policies to distributed systems is difficult, in particular, to a system containing untrusted components. We designed AspectKE*, an aspect-oriented programming language based on distributed tuple spaces to tackle this issue. One of the key features in AspectKE* is the program analysis predicates and functions that provide information on future behavior of a program. With a dual value evaluation mechanism that handles results of static analysis and runtime values at the same time, those functions and predicates enable the users to specify security policies in a uniform manner. Our two-staged implementation strategy gathers fundamental static analysis information at load-time, so as to avoid performing all analysis at runtime. We built a compiler for AspectKE*, and successfully implemented security aspects for a distributed chat system and an electronic healthcare record workflow system.

AB - Enforcing security policies to distributed systems is difficult, in particular, to a system containing untrusted components. We designed AspectKE*, an aspect-oriented programming language based on distributed tuple spaces to tackle this issue. One of the key features in AspectKE* is the program analysis predicates and functions that provide information on future behavior of a program. With a dual value evaluation mechanism that handles results of static analysis and runtime values at the same time, those functions and predicates enable the users to specify security policies in a uniform manner. Our two-staged implementation strategy gathers fundamental static analysis information at load-time, so as to avoid performing all analysis at runtime. We built a compiler for AspectKE*, and successfully implemented security aspects for a distributed chat system and an electronic healthcare record workflow system.

U2 - 10.1007/978-3-642-21464-6_14

DO - 10.1007/978-3-642-21464-6_14

M3 - Article in proceedings

SN - 878-3-642-21463-9

VL - 6721

T3 - Lecture Notes in Computer Science

SP - 202

EP - 218

BT - Coordination Models and Languages

PB - Springer

T2 - 13th International Conference on Coordination Models and Languages

Y2 - 6 June 2011 through 9 June 2011

ER -

Yang F, Aotani T, Masuhara H, Nielson F, Nielson HR. Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces. In Coordination Models and Languages: 13th International Conference, COORDINATION 2011, Reykjavik, Iceland, June 6-9, 2011 - Proceedings. Vol. 6721. Springer. 2011. p. 202-218. (Lecture Notes in Computer Science). doi: 10.1007/978-3-642-21464-6_14

Combining Static Analysis and Runtime Checking in Security Aspects for Distributed Tuple Spaces

Abstract

Conference

Access to Document

OpenUrl availability

Fingerprint

Cite this