No description available.

No description available.

存取控管是電子病歷 (Electronic Medical Records, EMR)安全防護的核心課題。為了因應醫病關係的變動及確保病患隱私，EMR的存取控管必須滿足動態和細緻化這兩大需求。但這樣的需求並不容易實現，因為負責存取控管的程式碼具有橫跨 (cross-cutting)的特性，必須嵌入到應用系統的各個模組，很容易與應用邏輯發生夾雜不清的現象。礙於現有的程式機制和開發工具對於這樣的安全需求無法提供有效的支援，因此本研究將以剖面導向程式設計 (Aspect Oriented Programming，AOP)技術為基礎，設計一個宣告式EMR安全控管方法，。 在我們的方法中，安全控管邏輯將從EMR系統的核心抽離，並且匯集到單一的剖面 (Aspect)模組，使原有的系統更加模組化 (modularity)。此外，利用我們開發的存取控管程式碼產生器，安全管理者可以藉由宣告組態檔的方式產生EMR的存取控管程式碼。如此一來，安全管理者不僅可以容易地掌握全局、減少分散管理可能造成的疏失，更可以大幅減少維護EMR存取安全所需的時間及成本。 / This paper presents an aspect-oriented approach to providing adaptable access control framework for Electronic Medical Records (EMR) on Web-based platform. In our scheme, access control logic is decoupled from the core of application and collected into separate aspect modules which are automatically synthesized from access control rules in XML format and properly designed aspect templates. The generated aspect modules will then be compiled and integrated into the underlying application using standard aspect tools. At runtime, these aspect codes will be executed to enforce the required access control without any runtime interpretation overhead. Future changes of access control rules can also be effectively realized through these mechanisms without actual coding. This will not only improve the system’s modularity but also make the task of enforcing comprehensive access control more adaptable.

近年來，模型驅動的軟體開發方式已在軟體開發社群引起廣泛的討論與研究。知名的物件管理組織並提出模型驅動架構來推廣這種新的軟體開發方式。一般使用模型驅動架構觀念的開發方法多著重在模型交換、模型變更及產生程式碼的精準度，但對於應用樣板程式在產生程式的使用上卻很少有特別的規範，故本研究選擇樣板程式的應用進行探討。在模型建構方面，我們依循一般將業務性及非業務性的模型分開設計及管理的方式，以方便系統開發人員在設計模型時，可以專注於業務性的功能設計，非業務性的功能便可依系統的需求選擇特定的組合；但在程式碼產生部分，本研究則應用剖面導向程式設計中的織入方式來產生程式碼。我們以Orr, Doug所製作的原型程式為基礎，建立一個應用剖面樣板於模型驅動開發的流程，並且以一個應用實例及使用工具來闡明整體導入的過程及運用價值。經由這樣的實例，可以讓系統開發者感受應用剖面樣板於模型驅動開發所帶來的方便及效率的提昇。 / Recently, model-driven software development has attracted great attention from the software development community. The Object Management Group (OMG) has also proposed the so-called Model-Driven Architecture (MDA) to promote it. As far as we know, most system development approaches using the MDA concept emphasize on model exchange, model change and degree of preciseness on code generation and do not discuss much about the usage of templates for code generation. Therefore, this research proposes to study the code generation part of MDA using templates. Like other MDA-based approaches, our development process also design and manage functional models and non-functional models separately, allowing system developers to focus on functional models design and to easily choose existing functions for non-functional models by requirements. What makes our approach different is we add an attachment model which facilitates the code generation steps by using the weaving mechanism found in aspect-oriented programming (AOP). In this study, we elaborate the attachment model proposed by Orr, Doug and propose an example of model-driven development process using it for code generation. Moreover, we utilize the prototype of Orr, Doug’s to create a complete example which re-engineers an existing application by replacing its system platform and extending its business functions using this process.

AspectFun是一個實驗性的剖面導向函式語言，它主要的特色在於具備能以靜態織入方式實現的多型剖面、高階剖面以及依據動態流程觸發的剖面。 本論文提出一個AspectFun語言的編譯器，其編譯過程分為四個主要步驟：語法結構轉換、剖面織入、剖面轉函式與整合動態流程判斷資訊。其中剖面織入是最複雜的步驟，必須仰賴可能是多型的型態資訊，選取適當的剖面整合到程式指定的切點處。這部份的織入工作，我們的編譯器是依據一套以靜態型態推論規則發展而來的轉譯規則，先將AspectFun程式轉譯成的剖面與函式整合在一起的中介格式，再翻譯為可執行的Haskell程式來完成。此外，本系統也是使用Haskell程式語言開發，並採用Monad技術將系統模組化，以達到最佳的可維護性、擴充性與閱讀性。本論文介紹系統的實作面，解釋AspectFun系統架構、語法、原理和實作帶來的貢獻以及限制。 / AspectFun is an experimental aspect-oriented functional language. Its main features include polymorphic aspects via static weaving, second-order aspects and control-flow triggered aspects. This thesis presents a type-directed compiler for AspectFun. Our compilation processes consists of four major steps: syntax de-sugaring, aspect weaving, translating aspects to normal functions, and integrating control flow information. The most complicated one is aspect weaving. Due to polymorphism in aspects, it is completely dependent on type information inferable from the aspects and the context they are used. We base our weaving step on a set of type-directed translation rules. In particular, the weaving step is further divided into two stages. First, an AspectFun program is translated into an intermediate form in which all aspects applicable at a context are chained together and integrated with context. Second, all aspects are translated into ordinary functions and any chain of aspects are transformed to a sequence of function calls in as an executable Haskell program. Moreover, the complier itself is implemented in Haskell. We fully utilize the monad mechanism of Haskell to modularize our compiler and achieve the goals of good maintainability, extensibility and readability.

對大部分的應用系統來說，在實施系統功能存取控管的同時，若沒有搭配適當的委任或委派權限的機制，將會大大影響系統用戶對存取控管限制的接受度，故本論文針對如何實現用戶間的權限委派進行探討。我們選擇以剖面導向技術開發的存取控管框架為標的，設計出一套模組化的權限委派機制，可以在不改變既有的存取控管剖面的情況下，進行用戶間的權限委派。我們採用動態剖面的技術，並結合個體層次的剖面功能，發展出可以在使用應用系統的交談期間，由用戶動態進行權限委派的啟動與關閉。此一操作方式不僅方便系統管理者進行存取控管與權限委派的設定，也讓用戶在使用上享有相當程度的彈性。我們以AspectWerkz的剖面框架為實驗平台，製作一個用戶間權限委派的展示系統。 / For many systems, access control without proper support for delegation is simply impractical. While access control has gained a considerable attention in the aspect-oriented community recently, delegation has not been properly addressed yet using aspects. This paper presents a simple yet novel approach to implementing delegation using dynamic aspects. This thesis shows that a proper combination of instance-level aspects and dynamic deployment can be used to enhance an aspect-based access control system with dynamic and fine-grained delegation effectively in a highly modular manner. We developed a prototype implementation using the per instance interception mechanism of AspectWerkz to illustrate our approach.

剖面所進行的運算通常都牽涉到狀態處理。在純粹函數式語言中，利用monadification技術添加狀態處理的剖面必須對程式碼做橫跨性的修改。本論文提出讓純粹函數式語言的剖面具備狀態處理功能，而使用者不須額外改寫既有程式碼的方法。我們提出了簡單直接的狀態操作語言機制，可以用來開發狀態處理剖面；並且設計出系統化的monadification規則，讓編譯器自動對程式碼做轉換，並維持惰性求值的特性。 / Computations performed in many typical aspects involve side effects. In a purely functional setting, adding such aspects using techniques such as monadification will generally lead to crosscutting changes. This thesis presents an approach to provide side-effecting aspects for purely lazy functional languages in a user transparent fashion. We propose a simple yet direct state manipulation construct for developing side-effecting aspects and devise a systematic monadification scheme to translate the woven code to a purely monadic style functional code. To maintain the lazy evaluation feature, the monad employed is extended with cache functionality.

目前許多網路應用程式（web application），遵循三層式開發架構，並藉由「會談」（session）營造出具有狀態機制的環境。雖然會談能將流程串起，其重要性無庸置疑，卻因分層的關係，造成想要在任一記錄點上，取得會談資訊的困難。 本研究的目的，即在嘗試以「剖面導向程式設計」（Aspect-Oriented Programming）為基礎，希望能打造一個簡單易用的工具，將「記錄」（log）這種非功能性，屬於橫切面考量的需求，暫時排除在開發階段外，到事後再以挑選的方式，更輕鬆地加入或修改。更重要的是，將會談資訊中的使用者帳號，或可資識別的序號，內嵌在每行記錄裏，因此稱為「具會談概念的記錄」。讓記錄內容的設計者，不需再為了如何封裝、傳遞、拆解而浪費時間。因為記錄與系統開發是獨立的，即使上線後，臨時性的記錄修改需求，也不至於對既有的穩定與效能，造成重大影響，或不可復原的災難性結果。 / Logging is an important part to application development for purposes such as debugging and auditing. While there are many good frameworks and utilities for assisting logging in application development, it is still not an easy task for the logging action to provide enough information for those purposes. Specifically, the user account information in particular or the session information in general is not easy to obtain when we perform logging for a designated backend operation such as database query. The reasons are twofold. Firstly, applications do not use user accounts, but have their own accounts to access database. Secondly, the three-tiered structure of an application makes it difficult to thread the user accounts to the backend for logging. This thesis presents an aspect-based utility for Java-based Web applications that enables developer to generate customizable logs with session information, including user accounts. Our tool employs two aspects: one predefined aspect for collecting session information and the other is generic one for producing user-defined logs at designated application points. Specifically, the tool takes a wizard-based approach that guides the user to customize the second aspect for its own target points in a user-friendly manner.

A convergência da Internet com outras redes (telefonia móvel e televisão digital), o surgimento da computação ubíqua e crescente demanda pela computação autônoma, tem favorecido a existência de um ambiente constantemente modificado e altamente dinâmico, caracterizado pelo tratamento e transporte de conteúdo multimídia, heterogeneidade nos recursos, tecnologias de redes e dispositivos de acesso. Este cenário tem exigido a existência de sistemas adaptativos, ou seja, que tenham a capacidade de se adaptar dinamicamente em resposta a mudanças no contexto em que estão inseridos. O projeto de software de sistemas adaptativos que visem atender de forma satisfatória evolução e mudança neste novo ambiente heterogêneo da Internet tem particular relevância e complexidade. Um dos principais desafios é realizar a implementação de comportamentos adaptativos sem entrelaçamento com outras funcionalidades da aplicação, que podem levar a dificuldade de legibilidade e prejudicar a manutenção do código. Este trabalho procura abordar este tema empregando programação orientada a aspectos na especificação e implementação de uma camada de adaptação que atua sobre aplicações multimídia em rede utilizando abordagens de adaptação baseados em servidor. Em particular, através do uso da linguagem AspectJ, é mostrado como promovemos a separação do interesse de adaptabilidade de forma modular para permitir que a camada de adaptação realize configuração estática e dinâmica de processos de transmissão de fluxos multimídia a partir de mecanismos de monitoração do seu ambiente de operação. / The convergence of the Internet with other networks (e.g. Mobile Telecom and Digital Television Networks), the ubiquitous computing raising and the increasing demand on the autonomic computing has favored the existence of a constantly modified and highly dynamic environment. It is characterized by the treatment and transport of multimedia content and resources, network technologies and access devices heterogeneity. This scenario has demanded the existence of adaptive systems, which has the capacity to dynamically adapt based on the context where they are inserted. The software design for adaptive systems, which aim to deal on a satisfactory way the evolution and changes in this new heterogeneous Internet environment, has particular relevance and complexity. One of the main challenges is performing the development of adaptive behaviors without tangled and scattered code along other application functionalities, which could result in code legibly problems, affecting its maintenance. The main purpose of this work is the specification and development of an adaptation layer working in multimedia networked application and using server based adaptation approach, making use of aspect oriented programming. Specifically, through the adoption of the AspectJ language it was showed how the adaptability concern was well modularized by enabling the adaptation layer to perform static and dynamic configuration of the multimedia chains through the monitoring of its operational environment.

Paradigmas e técnicas de desenvolvimento como a programação Orientada a Objetos (OO) e a programação Orientada a Aspectos (OA) procuram melhorar os níveis de reuso e manutenibilidade na produção de software. Contudo, com a introdução de mecanismos com maior poder de expressividade e, consequentemente, a possível introdução de novos tipos de defeitos, a utilização de linguagens OO e OA pode se tornar um obstáculo ao invés de um auxílio ao desenvolvimento de software. Para lidar com esse problema, nesta dissertação é proposta uma abordagem de teste estrutural de integração para programas orientados a objetos e a aspectos implementados em Java e AspectJ. É definido um modelo de fluxo de controle e de dados baseado no bytecode Java { chamado Grafo Def-Uso Contextual (ou Contextual Def-Use graph) - que é uma abstração formada pela integração dos grafos Def-Uso Orientados a Aspectos (AODU) da unidade sob teste com todas as unidades que interagem direta ou indiretamente com ela até um nível de profundidade de interação máximo ou definido pelo testador. São defiidos três critérios de teste: todos-nós-integrados-Nd, todas-arestas-integradas-Nd e todos-usos-integrados-Nd. Para automatizar o uso do modelo e critérios propostos, a ferramenta JaBUTi/AJ foi estendida. Exemplos de usos são discutidos e, por meio de um estudo experimental, uma análise de aplicabilidade da abordagem proposta é apresentada / Development paradigms and techniques such as Object-Oriented (OO) programming and Aspect-Oriented (AO) programming aim at improving reuse levels and maintenability in the software production. However, due to the introduction of mechanisms to support a greater power of expressiveness and, consequently, possible introduction of new type of faults, the use of OO and AO languages might become an obstacle instead of a benefit in the software development. To deal with these problems, in this dissertation is presented an integration structural testing approach for objectand aspect-oriented software based on Java and AspectJ. It is defined a control- and data- ow model based on Java bytecode { called Contextual Def-Use graph { that is an abstraction composed by the integration of Aspect-Oriented Def-Use graphs (AODU) of the unit under testing with the units triggered by the execution of the unit under testing considering either a maximum interaction depth level or an interaction depth level previously defined by the tester. Three testing criteria are also defined: all-integrated-nodes-Nd, all-integrated-edges-Nd and all-integrated-uses-Nd. To automate the use of the model and the testing criteria, the JaBUTi/AJ tool was extended. Usage examples are discussed to explain the approach and an exploratory study is conducted to evaluate the applicability of the proposed approach