Implementation of access control using aspect-oriented programming

  • Lionel Montrieux

    Student thesis: Master typesMaster in Computer science

    Abstract

    UMLsec is an extension of UML that allows one to define security-related properties on a set of UML diagrams, as well as to check whether or not the diagrams fulfil those properties. It is a sound and eficient way of making sure that security properties are actually enforced during the software modelling phase.
    If a model does not fulfil a UMLsec property, we propose a way of (semi-)automatically modify it in order for the desired property to be correctly enforced.
    But still, mistakes can easily arise when translating the UML diagrams to code. Therefore, we propose a way to automatically generate code from the model that will fulfil the same security properties as the model does. We compare the Object-Oriented and the Aspect-Oriented approaches, and select one to be implemented.
    Date of Award2009
    Original languageEnglish
    Awarding Institution
    • University of Namur
    SupervisorPierre-Yves Schobbens (Supervisor)

    Keywords

    • UML
    • UMLsec
    • object-oriented
    • programming
    • aspect-oriented programming
    • model transformation
    • security
    • automatic code generation
    • RBAC

    Cite this

    Implementation of access control using aspect-oriented programming
    Montrieux, L. (Author). 2009

    Student thesis: Master typesMaster in Computer science