Predictive access control for distributed computation

We show how to use aspect-oriented programming to separate security and trust issues from the logical design of mobile, distributed systems. The main challenge is how to enforce various types of security policies, in particular predictive access control policies — policies based on the future behavior of a program. A novel feature of our approach is that we can define policies concerning secondary use of data.

► AspectKLAIM is an aspect-oriented extension of a coordination language.
► The advice of AspectKLAIM can analyze the future behavior of a program.
► AspectKLAIM can enforce predictive access control policies.
► AspectKLAIM can enforce secondary use of data security policies.