使用AOP和Spring AOP加强安全性
Stronger Enforcement of Security Using AOP and Spring AOP
摘要：
应用程序安全有两个主要目标：首先，它旨在防止未经授权的人员访问比其授权更高级别的信息。二是意在防止人员解密信息。使用面向对象的方法来实现应用程序安全性不仅会导致代码分散和代码缠结的问题，而且还会导致安全性的执行较弱。这种较弱的安全性实施可能是由于系统的固有设计或由于编程错误。面向方面编程（AOP）通过提供另一种思考程序结构的方式来补充面向对象编程（OOP）。OOP中模块化的关键单元是类，而AOP中模块化的单元是方面。本文的目的是介绍面向方面编程AOP J与Spring AOP的集成提供了非常强大的机制来加强安全性。面向方面编程（AOP）允许将安全方面编织到应用程序中，提供额外的安全功能或引入全新的安全机制。使用AOP实现安全性是一种灵活的方法，可以单独开发，可扩展和可重用的代码片段称为方面。在这篇比较研究论文中，我们认为Spring AOP提供了比AOP J更强的安全性执行。我们已经展示了Spring AOP和AOP J都努力提供全面的AOP解决方案，并相互补充。
英文摘要：
An application security has two primary goals: first, it is intended to prevent unauthorised personnel from accessing information at higher classification than their authorisation. Second, it is intended to prevent personnel from declassifying information. Using an object oriented approach to implementing application security results not only with the problem of code scattering and code tangling, but also results in weaker enforcement of security. This weaker enforcement of security could be due to the inherent design of the system or due to a programming error. Aspect Oriented Programming (AOP) complements Object-Oriented Programming (OOP) by providing another way of thinking about program structure. The key unit of modularity in OOP is the class, whereas in AOP the unit of modularity is the aspect. The goal of the paper is to present that Aspect Oriented Programming AspectJ integrated with Spring AOP provides very powerful mechanisms for stronger enforcement of security.Aspect-oriented programming (AOP) allows weaving a security aspect into an application providing additional security functionality or introducing completely new security mechanisms.Implementation of security with AOP is a flexible method to develop separated, extensible and reusable pieces of code called aspects.In this comparative study paper, we argue that Spring AOP provides stronger enforcement of security than AspectJ.We have shown both Spring AOP and AspectJ strive to provide a comprehensive AOP solutions and complements each other.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
