基于AOP的数据库应用安全控制的设计与实现  

Design and Implementation of a Database Application Security Controls Based on AOP

作　　者：董源[1,2] 李培军[2] 许舒人[2] 

机构地区：[1]中国科学院大学,北京100049 [2]中国科学院软件研究所软件工程技术研究开发中心,北京100190

出　　处：《计算机系统应用》2015年第12期74-80,共7页Computer Systems & Applications

基　　金：新闻出版重大科技工程项目GXTC-CZ-1015004/0;国家科技支撑课题(2012BAH14B02)

摘　　要：数据库的安全访问控制作为系统层级的模块需要在各个模块中通用.传统的实现方式有两种:一是采用组件接口调用的方式将安全访问模块编入每个所需的业务逻辑当中,二是通过AOP配置的方式将模块切入.这两种方式中,无论是首次调用还是修改调用,开发人员都需要编写大量的函数调用代码或配置信息.针对配置信息代码量大、修改处理代价高这一问题,本文提出一种可视化的AOP配置方式,通过Dom4j自动配置方式完成安全访问控制模块的注入,减少开发人员编写冗余的配置信息,更加灵活地更改注入的内容.The security of the database access control needs common used in various modules as a system-level modules. There are two traditional ways to achieve it, the first one is by the way of the component interface call to join the secure access module into each required, and the second one is through the AOP configuration mode. The two ways require developers to write a lot of function code or configuration information. According to the problem of the configuration information for a large quantity of code and the high cost of modify the processing, this paper proposes a visualization of the AOP configuration, access control injection module automatically through Dom4j configuration mode to complete the security access, reduce the configuration information that developers have to written redundancy, as while as make it more flexible to change content.

关 键 词：AOP 数据访问 安全控制 可视化 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]