Take a look at the new version of this page: [ beta version ]. Tell us what you think.

ABSTRACT

Denial-of-Service (DoS) attacks are a major concern for modern distributed applications. They exploit weakness in the software in order to make it unavailable to well-behaved users. Building DoS resistant software is still an issue. Solutions relying on the use of annotations have been proposed. Nevertheless, they require modifying the source code of the application, and must thus be applied at design time. In this paper, we propose an annotation toolkit that allows building DoS resistant component-based systems. The solution we propose does not require any modification of the source code of the application. Moreover it can be applied at deployment time. Its implementation relies on the use of Aspect-Oriented Programming techniques together with Java 1.5 annotations.

REFERENCES

• 1: E. Bruneton, T. Coupaye, M. Leclercq, V. Quéma, and J.-B. Stefani. An open component model and its support in java. In CBSE, pages 7--22, 2004.
• 2: E. Bruneton, T. Coupaye, and J. Stefani. Recursive and dynamic software composition with sharing, 2002.
• 3: M. Eichberg and M. Mezini. Alice: Modularization of middleware using aspect-oriented programming. In T. Gschwind and C. Mascolo, editors, Software Engineering and Middleware: 4th International Workshop, SEM 2004, volume 3437, pages 47--63, Linz, Austria, March 2005. Springer-Verlag GmbH.
• 4: Fractal ADL. URL: http://fractal.objectweb.org/tutorials/adl/index.html.
• 5: Gregor Kiczales , Erik Hilsdale , Jim Hugunin , Mik Kersten , Jeffrey Palm , William G. Griswold, An Overview of AspectJ, Proceedings of the 15th European Conference on Object-Oriented Programming, p.327-353, June 18-22, 2001
• 6: G. Kiczales, J. Lamping, A. Menhdhekar, C. Maeda, C. Lopes, J.-M. Loingtier, and J. Irwin. Aspect-oriented programming. In M. Aksit and S. Matsuoka, editors, Proceedings European Conference on Object-Oriented Programming, volume 1241, pages 220--242. Springer-Verlag, Berlin, Heidelberg, and New York, 1997.
• 7: D. S. Kristopher. A database of computer attacks for the evaluation of intrusion.
• 8: AspectJ 5.0: Load Time Weaving. URL:http://www.eclipse.org/aspectj/doc/next/adk15notebook/ltw.html.
• 9: N. Pessemier, L. Seinturier, and L. Duchien. Components adl and aop: Towards a common approach. In Workshop ECOOP Reflection; AOP and Meta-Data for Software Evolution (RAM-SE 2004), Oslo, Norway, June 2004.
• 10: Xiaohu Qie , Ruoming Pang , Larry Peterson, Defensive programming: using an annotation toolkit to build DoS-resistant software, ACM SIGOPS Operating Systems Review, v.36 n.SI, Winter 2002 [doi>10.1145/844128.844134]
• 11: Christoph L. Schuba , Ivan V. Krsul , Markus G. Kuhn , Eugene H. spafford , Aurobindo Sundaram , Diego Zamboni, Analysis of a Denial of Service Attack on TCP, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.208, May 04-07, 1997
• 12: Oliver Spatscheck , Larry L. Peterson, Defending against denial of service attacks in Scout, Proceedings of the third symposium on Operating systems design and implementation, p.59-72, February 1999, New Orleans, Louisiana, United States
• 13: Davy Suvée , Wim Vanderperren , Viviane Jonckers, JAsCo: an aspect-oriented approach tailored for component based software development, Proceedings of the 2nd international conference on Aspect-oriented software development, p.21-29, March 17-21, 2003, Boston, Massachusetts [doi>10.1145/643603.643606]

INDEX TERMS

Primary Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
      D.2.0 General
          Subjects: Protection mechanisms

Additional Classification:
  D. Software
  D.1 PROGRAMMING TECHNIQUES
      D.1.3 Concurrent Programming
          Subjects: Distributed programming
  D.2 SOFTWARE ENGINEERING
        D.2.12 Interoperability
            Subjects: Distributed objects

General Terms:
Design, Management, Security

Keywords:
DoS attacks, annotations, aspect-oriented programming, components