The need for declarative security mechanisms

Autoren Stefan Probst
Josef Küng
Titel The need for declarative security mechanisms
Buchtitel Proc. 30th EUROMICRO Conf.
Typ in Konferenzband
Verlag IEEE Computer Society
Ort Rennes, France
ISBN 0-7695-2199-1
Monat September
Jahr 2004
Seiten 526-531
SCCH ID# 422
Abstract

Today, security is recognized as an absolute need in application development. Programming environments offer mechanisms and concepts allowing an easy integration of security mechanisms into the application. However, this often has to be done by hand, resulting in extra effort that has to be made during the development cycle. Furthermore, the code is popped up with statements that enforce application or site-specific security requirements, having negative impact on the reusability and maintainability of the code. The goal of this paper is to promote the usage of declarative security mechanisms which allow the decoupling of security logic completely from the application logic. Furthermore, the framework GAMMA is presented, that offers several declarative authentication, access control, and auditing mechanisms that can be transparently integrated into software applications.