Logo image
Back
ACIR An aspect-connector for intrusion response
Conference proceeding   Peer reviewed

ACIR An aspect-connector for intrusion response

Mohammad Gias Uddin, Hossain Shahriar and Mohammad Zulkernine
COMPSAC 2007: THE THIRTY-FIRST ANNUAL INTERNATIONAL COMPUTER SOFTWARE AND APPLICATIONS CONFERENCE, VOL II, PROCEEDINGS, Vol.2, pp.249-254
Proceedings International Computer Software and Applications Conference
Annual International Computer Software and Applications Conference (COMPSAC 2007), 31st (Beijing, China, 07/24/2007–07/27/2007)
08/2007
DOI: https://doi.org/10.1109/COMPSAC.2007.49
Web of Science ID: WOS:000249654100038

Metrics

1 Record Views
2 Times Cited - Web of Science

Abstract

intrusion response Computer Science Information Science or Systems Software Engineering
The modularization concept behind component-based software (CBS) cannot be applied effectively for cross-cutting concerns such as security. Aspect-oriented programming (AOP) helps in better modularization by identifying crosscutting concerns and providing a suitable way to separate those concerns. In this paper, we provide an aspect-connector based intrusion response (detection and prevention) architecture for CBS by bringing the concepts of aspects into components. The aspect-connector is named as ACIR (Aspect Connector for Intrusion Response). Component interfaces act as join points, and aspects containing pointcuts and advices are defined in ACIR configuration file. Advices applicable to particular pointcuts are two types. Signature advices are used to detect intrusions, and action advices are executed to prevent intrusions. A prototype of this architecture is implemented and evaluated using some intrusions included in the Web Application Security Consortium (WASC) intrusion list. This approach detects and prevents intrusions in CBS while maintaining encapsulation, reusability, and modularity.

Details

Logo image