Secure flow typing

Computers and Security

Volumn 16, Issue 2, 1997, Pages 137-144

  Volpano, Dennis ^a   Irvine, Cynthia ^a  

^a Naval Postgraduate School   (United States)

Author keywords

Certification; Secure information flow; Type systems; Web programming

Indexed keywords

COMPUTER NETWORKS; COMPUTER PROGRAMMING; COMPUTER SOFTWARE; FILE ORGANIZATION;

INTERNET PROGRAMMING; TYPE SYSTEMS; WEB PROGRAMMING;

SECURITY OF DATA;

EID: 0030713201     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0167-4048(97)00002-3     Document Type: Article

References (15)

1. Biba, K., Integrity considerations for secure computer systems. Technical report, ESD-TR-76-372, MITRE Corp., Bedford, MA, 1977.
2. Lunt, T., Neumann, P., Denning, D., Schell, R., Heckman, M. and Shockley, W., Secure distributed data views security policy and interpretation for DMBS for a class A1 DBMS. Technical report, RADC-TR-89-313, Vol. 1, Rome Air Development Center, Griffiss Air Force Base, NY, December, 1989.
3. van Hoff, A., Shaio, S. and Starbuck, O., Hooked on Java. Addison-Wesley, Reading, MA, 1996.
4. Bell, D. and LaPadula, L., Secure computer system: mathematical foundations and model. Technical report, M74-244, MITRE Corp., Bedford, MA, 1973.
5. Bell, D. and Burke, E., A software validation technique for certification: the methodology. Technical report, MTR-2932, MITRE Corp., Bedford, MA, 1974.
6. Denning, D., Secure information flow in computer systems. Ph.D. thesis, Purdue University, West Lafayette, IN, 1975.
7. D. Denning, A lattice model of secure information flow, Communications of the ACM, 19(5) (1976) 236-242.
8. D. Denning and P. Denning, Certification of programs for secure information flow, Communications of the ACM, 20(7) (1977) 504-513.
9. M. Mizuno and D. Schmidt, A security flow control algorithm and its denotational semantics correctness proof, Formal Aspects of Computing, 4(6A) (1992) 722-754.
10. Volpano, D., Smith, G. and Irvine, C., A sound type system for secure flow analysis. Journal of Computer Security, submitted.
11. G. Andrews and R. Reitman, An axiomatic approach to information flow in programs, ACM Transactions on Programming Languages and Systems, 2(1) (1980) 56-76.
12. Banâtre, J., Bryce, C. and Le Métayer, D., Compile-time detection of information flow in sequential programs. In Proceedings of the 3rd European Symposium on Research in Computer Security, Lecture Notes in Computer Science 875, Brighton, UK, November 1994, pp. 55-73.
13. Mizuno, M., A least fixed point approach to interprocedural information flow control. In Proceedings of the 12th National Computer Security Conference, 1989, pp. 558-570.
14. Hoang, M. and Mitchell, J., Lower bounds on type inference with subtypes. In Proceedings of the 22nd Symposium on Principles of Programming Languages, San Francisco, CA, 1995, pp. 176-185.
15. Smith, G., Polymorphic type inference for languages with overloading and subtyping. Ph.D. thesis, Technical report, 91-1230, Cornell University, Ithaca, NY, 1991.