Developing secure applications through aspect-oriented programming

Aspect-oriented programming represents a –if not the most – promising approach to improve the software development process. It seems particularly appropriate when application requirements that seem wellseparated require software behaviour that crosscuts the basic decomposition of the application. The domain of software security is an excellent example of a real-world concern requiring a sophisticated solution to the challenge of separation of concerns. In this chapter, we report upon our experiences in using AspectJ to secure application software in a manageable way. Our case studies illustrate the effectiveness of AOP technology and show encouraging results, though we also highlight some challenges to be addressed in the further development of aspect-oriented software development technology.