交任务啦

 

刚刚吧论文发给了导师，导师本来要要求的题目是aop和信息隐藏。可是我找了n多资料就是没有发现这个信息隐藏到底是指：信息封装还是信息加密。吃饭的时候问导师：导师说是信息封装。可是更糊涂啦，aop就是横切哪里来的信息封装呢？
没有办法，最后吧文章写成了《aop在安全领域的应用研究》，呵呵，有点文不对题呀。
在写这篇论文的过程中参考了超过50篇文献。。。希望不是写的太惨，部分内容如下！

---

 

面向方面编程技术在安全领域的应用研究

摘要：计算机技术的发展对安全性提出了更高的要求。由于AOP自身的特点，决定了它可以很好的应用在安全领域。它能提高系统的安全性、安全模块的重用性。文章介绍了AOP 思想以及AOP在安全领域的应用情况。

Abstract: The development of computer technology has set a higher safety requirements . Due to the special features of AOP, it could be very well applied in the field of security. AOP can Improve system security, the reusability of modules security. This paper introduces the idea of AOP and AOP’s application in the field of security.

关键词：面向方面  安全  应用

Key words: AOP  security  application

1 引言

2 面向方面编程基础

2.1 面向方面的提出

2. 2 设计步骤

2.3 AOP在安全领域的优势

3 应用及研究情况

由于AOP自身的优点，决定了它可以很好的应用在安全领域。文献[18]指出安全是AOP运用的一个适合领域。安全在应用程序中表现出大量的横切特性，而应用AOP开发的系统，安全代码不是散布在应用代码的很多类里，所以安全性比较容易实现。本节介绍了AOP在安全领域的应用情况。

4 总结

在介绍AOP 的基本思想的同时，探讨了基于AOP安全程序设计的方法和优点，并对当前国内外AOP技术在安全领域的研究进行了概述。从安全策略的选择，到安全代码的层次性、可维护性和可重用性等方面，AOP 都是比传统编程方式更好的选择。

AOP 做为一种全新的思想，从编程方法学的角度给安全编程带来了新的活力。在软件规模日益扩大，结构日益复杂的今天，AOP 将会发挥越来越重要的作用。

参考文献：

1.熊策,陈志刚.AOP技术及其在并发访问控制中的应用.计算机工程与应用,2005,(16).

2.陈向群,杨芙清.面向Aspect的操作系统研究.软件学报,2006,(03).

3. John Viega,Bloch J T, Pravir Chandra. Applying Aspect-Oriented Programming to security[J]. Cutter IT Journal,2001,(14).

4. Shah V,Hill F.An aspect-oriented security framework.DARPA Information Survivability Conference and Exposition, 2003 Proceedings Volume 2

5. Xu D, Nygard K E.Threat-driven modeling and verification of secure software using aspect-oriented Petri-nets.Software Engineering, IEEE Transactions on Volume 32, Issue 4, April 2006.

6. Huiqun Yu,Dongmei Liu,Xudong He,Li Yang,Shu Gao.Secure software architectures design by aspect orientation.Engineering of Complex Computer Systems, 2005. ICECCS 2005. Proceedings. 10th IEEE International Conference on 16-20 June 2005.

7.Dianxiang Xu,Goel, V. An aspect-oriented approach to mobile agent access control.Information Technology: Coding and Computing, 2005. ITCC 2005. International Conference on Volume 1,  4-6 April 2005.

8.Chang, C.K.Tae-hyung Kim. Distributed systems design using function-class decomposition with aspects .Distributed Computing Systems, 2004. FTDCS 2004. Proceedings. 10th IEEE International Workshop on Future Trends of 26-28 May 2004.

9. Falcarin P,Scandariato R, Baldi M. Remote trust with aspect-oriented programming.Advanced Information Networking and Applications, 2006. AINA 2006. 20th International Conference on Volume 1, 18-20 April 2006.

10.李大治.企业应用系统安全平台的关键技术研究及实现.中国科学院研究生院(软件研究所).2005.

11.Hagen HaSle. Aspect-Oriented Programming and Security. http://nislab.hig.no/Research/docs/haagenh-2004.pdf,2004

12. J. Viega, J.T. Bloch and P. Chandra. Applying Aspect-Oriented Programming to Security. Otter IT Journal,vol. 14, no. 2, February 2001.

13. Laddad R .AspectJ in Action. Manning, Greenwich, 2003.

14. Bart Vanhaute, BartDeWin.AOP, Security and Generality, 1st Belgian AOSD Workshop, Vrije Universiteit Brussel, Brussels, Belgium. 2001

15. Robin C.Laney, Janet van der Linden, Pete Thomas. Evolution of Aspects for Legacy System Security.http://    www.cs.kuleuven.ac.behdistrinedevents/aosdsec/AOSDSEC04Janet_yanderLinden.pdf,2004.

16. J. Viega and J. Voas. Can Aspect-Oriented Programming Lead to More Reliable Software. IEEE Software 2000

17. Mira Mezini, Klaus Ostermann, Roman Pichler, Component Models and Aspect-Oriented Programming. http://www.st.informatik.tudarmstadt.de:8080/lehreJws01/sctoo/materials/aj-aop.pdf,2003

18.Viega J, Bloch JT, Chandra P. Applying Aspect oriented programming to security. Cutter IT Journal, 2001,14.

19.JOHN VIEGA , BLOCH J T, PRAVIR CHANDRA. Applying Aspect2Oriented Programming to Security[J ] . Cutter IT Journal,2001,14.

20.MYERS A. Practical Mostly2Static Information Flow Control [A ] . In Proceedings of the 26th ACM SIGPLAN - SIGACTSymposium on Principles of Programming Languages. ACM,1999. 1.

21.Falcarin P, Baldi M, Mazzocchi D. Software tampering detection using AOP and mobile code. In: AOSD Workshop. AOSD Technology for Application-level Security (AOSDSEC). 2004.

22.Laney R, Linden JV, Thomas P. Evolution of Aspects for legacy system security concerns. In: AOSD Workshop. AOSD Technology for Application-level Security (AOSDSEC). 2004.

23. Cazzola W, Pini S, Ancona M. AOP for Software Evolution: A Design Oriented Approach.

SAC'O5, New Mexico, 2005.

24. Garson E, Thomas D. Aspect-Oriented Programming in C#/..NET. Visual Systems Journal (VSJ)，February 2004.

25.王晓超. WEB安全架构的分析与实现. 北京邮电大学.2006.

26.樊会锋. WEB应用服务器安全服务的设计与实现.中国科学院研究生院（软件研究所）.2004.

27.陈谔.面向方面的WEB应用安全框架设计技术研究.浙江大学.2006.

28.Win BD, Joosen W, Piessens F. AOSD & security: A practical assessment. Workshop on Software-Engineering Properties of Languages for Aspect Technologies (AOSD- SPLAT 2003). 2003.

29.Vanhaute B, Win BD, Decker BD. Building Frameworks in AspectJ. Proc. of the Workshop on Advanced Separation of Concerns. 2001. 1-6.

30.Win BD, Vanhaute B, Decker BD. Security through Aspect-oriented programming. Decker BD, Piessens F, Smits J,Herreweghen EV, eds. Advances in Network and Distributed Systems Security. Dordrecht: Kluwer Academic Publishers, 2001.

31.Shah V, Hill F. An Aspect-oriented security framework: Lessons learned. AOSD Workshop. AOSD Technology for Application-Level Security (AOSDSEC). 2004.

32.Mahrenholz D, Spinczyk O, Schrder-Preikschat W. Program instrumentation for debugging and monitoring with AspectC++. In:IEEE Computer Society, ed. Proc. of the 5th IEEE Int’l Symp. on Object-Oriented Real-Time Distributed Computing. Washington DC, Los Alamitos: IEEE Computer Society Press, 2002.

33.Lippert M, Lopes CV. A study on exception detection and handling using Aspect-oriented programming. Proc. of the 22nd Int’l Conf. on Software engineering. New York: ACM Press, 2000.

34.Manson J, Vitek J, Jagannathan S. Dynamic Aspects for runtime fault determination and recovery. Filman RE, Haupt M,Hirschfeld R, eds. Dynamic Aspects Workshop (DAW 2005). Int’l Conf. on Aspect-Oriented Software Development (AOSD 2005).2005.

35. 刘天阳.AOP与权限控制研究.大连理工大学.2005

 

---