loading...
Availability Enforcement by Obligations and Aspects Identification
Vienna, Austria April 20-April 22
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ARES.2006.36First International Conference on Ava ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Frederic Cuppens, GET/ENST Bretagne, 2 rue de la Chataigneraie, 35512 Cesson Sevigne Cedex, France
Nora Cuppens-Boulahia, GET/ENST Bretagne, 2 rue de la Chataigneraie, 35512 Cesson Sevigne Cedex, France
Tony Ramard, GET/ENST Bretagne, 2 rue de la Chataigneraie, 35512 Cesson Sevigne Cedex, France
Information systems are more and more victim of denial of service attacks. Thus, availability is a critical property which is more and more difficult to achieve. In this paper, we devise a new approach to design programs that enforce availability requirements. This approach is based on a formal security model called Nomad which combines deontic and temporal logics. We show how to use this model to specify availability requirements. Our proposal is then based on aspect programming. For this purpose, availability requirements expressed in the Nomad model are transformed into availability aspects. Using aspect programming languages such as AspectJ, we can then weave these availability aspects to transform an insecure program into a secure one.
Index Terms:
Availability, obligation, aspects, temporized actions
Citation:
Frederic Cuppens, Nora Cuppens-Boulahia, Tony Ramard, "Availability Enforcement by Obligations and Aspects Identification," ares, pp.229-239, First International Conference on Availability, Reliability and Security (ARES'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.