Research on Declarative Description and Consistency Checking of Policies for Adaptive Software

自适应软件策略声明式描述及一致性检查研究

• 批准号: 15500028
• 负责人: WATANABE Takuo
• 金额: $ 2.24万
• 依托单位: Tokyo Institute of Technology (2004)National Institute of Informatics (2003)
• 依托单位国家: 日本
• 项目类别: Grant-in-Aid for Scientific Research (C)
• 财政年份: 2003
• 资助国家: 日本
• 起止时间: 2003 至 2004
• 项目状态: 已结题
• 来源: https://kaken.nii.ac.jp/en/grant/KAKENHI-PROJECT-15500028/
• 关键词: policy enforcement; bytecode transformation; self checking code; execution-time analysis; adaptive software; design by contract; aspect orientation; cross-cutting concerns; 自己検査コード; 実行時検査; プロセス代数; Java; Common-Lisp

In this research, we have investigated a novel secure execution scheme and safe composition of of software components that are especially utilized to extend, reconfigure or maintain a dynamically extensible and/or context-aware systems. We have developed a new security architecture called Taurus-1 that adopts monitored execution as a basic security enforcement mechanism. We have shown that how Taurus-1 can provide a security enhancement mechanism for such extensible and/or context-aware systems and then discuss how to specify security policies for them. To achieve a secure and safe composition of components, we have also designed a behavioral interface specification language Moxa that provides a new modularization mechanism based on assertion aspects. The use of assertion aspects clarifies the large, complex specification and greatly simplifies each assertion in the specification.

在这项研究中，我们研究了一种新颖的安全执行方案以及软件组件的安全组成，这些方案特别用来扩展，重新配置或保持动态扩展和/或上下文感知系统。我们已经开发了一种名为Taurus-1的新安全体系结构，该体系结构采用受监控的执行作为基本的安全执法机制。我们已经表明，Taurus-1如何为这种可扩展和/或上下文感知系统提供安全增强机制，然后讨论如何为其指定安全策略。为了获得组件的安全和安全组成，我们还设计了一种行为接口规范语言MOXA，该语言MOXA基于断言方面提供了新的模块化机制。主张方面的使用阐明了大型，复杂的规范，并大大简化了规范中的每个断言。

项目成果

一杉裕志(他2名): "安全に結合可能なmixinを提供するためのルール"コンピュータソフトウェア. 20巻3号. 80-87 (2003)

Hiroshi Hitosugi（和其他 2 人）：“提供可以安全组合的 mixins 的规则”计算机软件，第 20 卷，第 3 期 80-87（2003 年）。

Execution Monitoring and Information Flow Properties

执行监控和信息流属性

• 发表时间: 2005
• 期刊: DSN 2005 Workshop on Dependable Software-Tools and Methods(IEEE Press) (in press)
• 作者: Naoyuki Nagatou;Takuo Watanabe
• 通讯作者: Takuo Watanabe

Moxa : An Aspect-Oriented Approach to Modular Behavioral Specifications

Moxa：模块化行为规范的面向方面的方法

• 发表时间: 2005
• 期刊: AOSD 2005 Workshop on Software-engineering Properties of Languages and Aspect Technologies(SPLAT '05)(http://www.daimi.au.dk/~eernst/splat05/)
• 作者: Kiyoshi Yamada;Takuo Watanabe
• 通讯作者: Takuo Watanabe

Specifying Context-Aware Runtime Security Policies using an Algebraic Policy Specification Language

使用代数策略规范语言指定上下文感知运行时安全策略

• 发表时间: 2004
• 期刊: International Conference on Software Engineering
• 作者: Akashi;Y.;Matsuzaki;K.;Iwasaki;H.;Kakehi;K.;Hu;Z;Takuo Watanabe
• 通讯作者: Takuo Watanabe

An Aspect-Oriented Approach to Modular Behavioral Specification of Java Components

Java 组件模块化行为规范的面向方面方法

• 发表时间: 2005
• 期刊: International Conference on Software Engineering
• 作者: Takako Nakatani;Masaaki Hashimoto;et al.;Kiyoshi Yamada
• 通讯作者: Kiyoshi Yamada