arXivDaily arXiv每日学术速递 周一至周五更新
arXiv cs/0507071cs.CR
收藏

基于面向对象编程的分布式Web应用安全

Security for Distributed Web-Applications via Aspect-Oriented Programming

Nicolai Kuntze, Thomas Rauch, Andreas U. Schmidt

摘要:

身份管理在商业系统中变得越来越重要,因为它们对包括贸易伙伴,消费者和供应商在内的第三方开放。本文提出了一种在不知道系统源代码的情况下保护系统安全的方法。安全模块基于面向方面的编程和自由联盟框架(一个即将到来的提供单点登录的工业标准)向现有系统添加认证和授权。在初始培训阶段,模块适用于要保护的应用程序。此外,硬件令牌和主动计算的使用进行了演示。高度模块化是通过使用Java的程序设计语言扩展来实现的。

英文摘要:

Identity Management is becoming more and more important in business systems as they are opened for third parties including trading partners, consumers and suppliers. This paper presents an approach securing a system without any knowledge of the system source code. The security module adds to the existing system authentication and authorisation based on aspect oriented programming and the liberty alliance framework, an upcoming industrie standard providing single sign on. In an initial training phase the module is adapted to the application which is to be secured. Moreover the use of hardware tokens and proactive computing is demonstrated. The high modularisation is achived through use of AspectJ, a programming language extension of Java.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑