Using standard verifier to check secure information flow in Java bytecode

Proceedings - IEEE Computer Society's International Computer Software and Applications Conference

Volumn , Issue , 2002, Pages 850-855

  Bernardeschi, Cinzia ^a   De Francesco, Nicoletta ^a   Lettieri, Giuseppe ^a  

^a UNIVERSITY OF PISA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; CODES (SYMBOLS); DATA FLOW ANALYSIS; INTERNET; JAVA PROGRAMMING LANGUAGE; PROGRAM COMPILERS; SECURITY OF DATA; WEB BROWSERS;

APPLET; BYTECODE VERIFICATION; JAVA VIRTUAL MACHINE CODE;

SOFTWARE ENGINEERING;

EID: 0036389413     PISSN: 07303157     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. G. R. Andrews and R. P. Reitman. An axiomatic approach to information flow in programs. ACM Trans. Program. Lang. Syst., 2(1):56-76, 1980.
2. T. Ball. What's in a region? or computing control dependence regions in near-linear time for reducible control flow. ACM Letters on Program. Lang. Syst., 2(1-4):1-16, 1993.
3. R. Barbuti, C. Bernardeschi, and N. D. Francesco. Abstract interpretation of operational semantics for secure information flow. Information Processing Letters, To appear 2002.
4. R. Barbuti, C. Bernardeschi, and N. D. Francesco. Checking security of java bytecode by abstract interpretation. In The 17th ACM Symposium on Applied Computing: Special Track on Computer Security Proceedings. Madrid, March 2002.
5. C. Bernardeschi and N. D. Francesco. Combining abstract interpretation and model checking for analysing security properties of java bytecode. In WMCAI2002 Proceedings, pages 1-15, 2002.
6. P. Bieber, J. Cazin, P. Girard, J.-L. Lanet, V. Wiels, and G. Zanon. Checking secure interactions of smart card applets. In ESORICS 2000 Proceedings, 2000.
7. D. E. Denning and P. J. Denning. Certification of programs for secure information flow. Comm. ACM, 20(7):504-513, 1977.
8. X. Leroy. Java bytecode verification: an overview. In 13th International Conference on Computer Aided Verification, LNCS 2102, Proceedings, pages 265-285, July 2001.
9. M. Mizuno and D. A. Schmidt. A security flow control algorithm and its denotational semantics correctness proof. Formal Aspects of Computing, 4:727-754, 1992.
10. J. Possegga and H. Vogt. Bytecode verification for java smartcards based on model checking. In ESORICS 98 Proceedings, 1998.
11. E. Rose and K. Rose. Lightweight bytecode verification. In WFUJ 98 Proceedings, 1998.
12. L. T. and F. Yellin. The java virtual machine specification. Addison-Wesley Publishing Company, Reading, Massachusetts, 1996.
13. D. Volpano, G. Smith, and C. Irvine. A sound type system for secure flow analysis. Journal of Computer Security, 4(3):167-187, 1996.