Boussaha Mohamed Racem, Khoury Raphaël et Hallé Sylvain. Monitoring of security properties using BeepBeep. Dans : 10th International Symposium, FPS 2017, Revised Selected Papers , October 23-25, 2017, Nancy, France.
Prévisualisation |
PDF
- Version acceptée
406kB |
Résumé
Runtime enforcement is an effective method to ensure the compliance of program with user-defined security policies. In this paper we show how the stream event processor tool BeepBeep can be used to monitor the security properties of Java programs. The proposed approach relies on AspectJ to generate a trace capturing the program’s runtime behavior. This trace is then processed by BeepBeep, a complex event processing tool that allows complex data-driven policies to be stated and verified with ease. Depending on the result returned by BeepBeep, AspectJ can then be used to halt the execution or take other corrective action. The proposed method offers multiple advantages, notable flexibility in devising and stating expressive user-defined security policies.
| Type de document: | Matériel de conférence (Non spécifié) |
|---|---|
| Sujets: | Sciences naturelles et génie > Sciences mathématiques > Informatique |
| Département, module, service et unité de recherche: | Départements et modules > Département d'informatique et de mathématique |
| Liens connexes: | |
| Mots-clés: | Sécurité informatique, traitement d'événements, sécurité des programmes, politique de sécurité |
| Déposé le: | 28 mars 2018 21:44 |
|---|---|
| Dernière modification: | 24 janv. 2019 22:35 |
Éditer le document (administrateurs uniquement)
Altmetric
Altmetric