Frederic Cuppens, GET/ENST Bretagne, 2 rue de la Chataigneraie, 35512 Cesson Sevigne Cedex, France
Tony Ramard, GET/ENST Bretagne, 2 rue de la Chataigneraie, 35512 Cesson Sevigne Cedex, France
Information systems are more and more victim of denial of service attacks. Thus, availability is a critical property which is more and more difficult to achieve. In this paper, we devise a new approach to design programs that enforce availability requirements. This approach is based on a formal security model called Nomad which combines deontic and temporal logics. We show how to use this model to specify availability requirements. Our proposal is then based on aspect programming. For this purpose, availability requirements expressed in the Nomad model are transformed into availability aspects. Using aspect programming languages such as AspectJ, we can then weave these availability aspects to transform an insecure program into a secure one.
Index Terms:
Availability, obligation, aspects, temporized actions
Citation:
Frederic Cuppens, Nora Cuppens-Boulahia, Tony Ramard, "Availability Enforcement by Obligations and Aspects Identification," ares, pp.229-239, First International Conference on Availability, Reliability and Security (ARES'06), 2006