An Aspect-Oriented, declarative, security policy specification language is presented, for enforcement by In-lined Reference Monitors. The semantics of the language establishes a formal connection between Aspect-Oriented Programming and In-lined Reference Monitoring wherein policy specifications denote AspectOriented security automata-security automata whose edge labels are encoded as pointcut expressions. The prototype language implementation enforces these security policies by automatically rewriting Java bytecode programs so as to detect and prevent policy violations at runtime.
SPoX REF built on aspect-oriented programming to implement in-lined reference monitoring for Java, using as policies automata whose edges are labeled with pointcut expressions.
Aspect-oriented in-lined reference monitors
PLAS '08
Computer Science