Comparison Study of Aspect-Oriented and Container Managed Security

1
Comparison Study of Aspect-Oriented and Container
Managed Security
AAOS 2003 Analysis of Aspect-Oriented Software
Pawel Slowikowski ps_at_agh.edu.pl Krzysztof
Zielinski kz_at_agh.edu.pl Department of Computer
Science AGH University of Science and
Technology, Cracow, Poland
2
Research

• Object-oriented and Component-based systems
• Java 2 Enterprise Edition (J2EE)
• Java Management Extensions (JMX)
• CORBA
• ..
• Domains
• Security
• Monitoring
• ..

3
Security requirements

• Authentication
• Access control
• Audit

4
Security implementation in J2EE

• Container managed security
• enforced by container
• declarative security in deployment descriptor
• limited to containers functionality
• separated from business logic

• Aspect-oriented security (with AspectJ)
• enforced by aspect
• programmatic security in aspect
• limited by scope of pointcuts
• separated from business logic

5
The paper

• Contains examples with source code for
• authentication of a client application
• RAD based access control
• accountability
• Java / JAAS / JBoss / AspectJ

6
Thank you for your attention...