Secure composition of untrusted code: Box π, wrappers, and causality types

Journal of Computer Security

Volumn 11, Issue 2, 2003, Pages 135-187

  Sewell, Peter ^a   Vitek, Jan ^b  

^a UNIVERSITY OF CAMBRIDGE   (United Kingdom)

^b Purdue University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER NETWORKS; DATA PROCESSING; PERSONAL COMPUTERS; SECURITY OF DATA; SEMANTICS;

ACCESS CONTROL MECHANISMS;

COMPUTER PROGRAMMING;

EID: 0037272061     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2003-11202     Document Type: Conference Paper

References (46)

1. M. Abadi, A. Banerjee, N. Heintze and J.G. Riecke, A core calculus of dependency, in: POPL '99, Proceedings of the 26th ACM SIGPLAN-SIGACT on Principles of programming languages, 1999, ACM, ed., San Antonio, TX, ACM Press, New York, NY, USA, 1999, pp. 147-160.
2. M. Abadi, C. Fournet and G. Gonthier, Secure implementation of channel abstractions, in: LICS 98, (Indiana), IEEE, Computer Society Press, 1998, pp. 105-116.
3. R.M. Amadio, I. Castellani and D. Sangiorgi, On bisimulations for the asynchronous π-calculus, in: Proceedings CONCUR 96, U. Montanari and V. Sassone, eds, Pisa, Italy, Vol. 1119 of LNCS, 1996, pp. 147-162.
4. G. Back, P. Tullmann, L. Stoller, W.C. Hsieh and J. Lepreau, Java operating systems: Design and implementation, Technical Report UUCS-98-015, University of Utah, Department of Computer Science, Aug. 6, 1998.
5. M. Boreale and D. Sangiorgi, A fully abstract semantics for causality in the pi-calculus, in: Proceedings of STACS '95, Vol. 900 of Lecture Notes in Computer Science, E.W. Mayr and C. Puech, eds, Springer-Verlag, 1995, pp. 243-254.
6. G. Boudol, Asynchrony and the π-calculus (note), Rapport de Recherche 1702, INRIA Sofia-Antipolis, May 1992.
7. S. Brookes, C. Hoare and A. Roscoe, A theory of communicating sequential processes, Journal of the ACM 31(3) (1984), 560-599.
8. L. Cardelli and A.D. Gordon, Mobile ambients, in: Proc. of Foundations of Software Science and Computation Structures (FoSSaCS), ETAPS '98, LNCS 1378, 1998, pp. 140-155.
9. P. Degano and C. Priami, Causality for mobile processes, in: Proceedings of ICALP '95, Vol. 944 of Lecture Notes in Computer Science, Z. Fülöp and F. Gécseg, eds, Springer-Verlag, 1995, pp. 660-671.
10. B. Ford, M. Hibler, J. Lepreau, P. Tullman, G. Back and S. Clawson, Microkernels meet recursive virtual machines, in: 2nd Symposium on Operating Systems Design and Implementation (OSDI '96), USENIX, ed., Seattle, WA, Berkeley, CA, USA, USENIX, 1996, pp. 137-151.
11. C. Fournet, G. Gonthier, J.-J. Lévy, L. Maranget and D. Rémy, A calculus of mobile agents, in: Proceedings of CONCUR '96. LNCS 1119, Springer-Verlag, 1996, pp. 406-421.
12. T. Fraser, L. Badger and M. Feldman, Hardening COTS software with generic software wrappers, in: IEEE Symposium on Security and Privacy, Berkeley, California, 1999.
13. D.P. Ghormley, S.H. Rodrigues, D. Petrou and T.E. Anderson, Interposition as an operating system extension mechanism, Technical Report CSD-96-920, University of California, Berkeley, Apr. 9, 1997.
14. N. Glew and G. Morrisett, Type-safe linking and modular assembly language, in: POPL '99. Proceedings of the 26th ACM SIGPLAN-SIGACT on Principles of programming languages, 1999, ACM, ed., San Antonio, TX, New York, NY, USA, ACM Press, 1999, pp. 250-261.
15. I. Goldberg, D. Wagner, R. Thomas and E.A. Brewer, A secure environment for untrusted helper applications, in: Sixth USENIX Security Symposium, San Jose, California, 1996.
16. L. Gong, Java security architecture (JDK 1.2), Technical report, JavaSoft, July 1997, Revision 0.5.
17. N. Heintze and J.G. Riecke, The SLam calculus: Programming with secrecy and integrity, in: Proceedings of the 25th POPL, 1998.
18. M. Hennessy and J. Riely, Information flow vs resource access in the asynchronous pi-calculus (extended abstract), in: Proceedings of the 27th ICALP, LNCS 1853, 2000, pp. 415-427.
19. K. Honda and M. Tokoro, An object calculus for asynchronous communication, in: Proceedings of ECOOP '91, LNCS 512, P. America, ed., 1991, pp. 133-147.
20. K. Honda, V. Vasconcelos and N. Yoshida, Secure information flow as typed process behaviour, in: Proceedings of ESOP 2000, 2000.
21. N. Islam, R. Anand, T. Jaeger and J.R. Rao, A flexible security system for using Internet content, IEEE Software 14(5) (1997), 52-59.
22. M.B. Jones, Interposition agents: Transparently interposing user code at the system interface, in: Secure Internet Programing: Security Issues for Mobile and Distributed Objects, J. Vitek and C. Jensen, eds, Springer-Verlag, 1999.
23. M.H. Kang, I.S. Moskowitz and D.C. Lee, A network pump, IEEE Transactions on Software Engineering 22(5) (1996), 329-338.
24. X. Leroy and F. Rouaix, Security properties of typed applets, in: Conference Record of POPL '98: The 25th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, San Diego, California, 1998, pp. 391-403.
25. J. McLean, Security models, in: Encyclopedia of Software Engineering, J. Marciniak, ed., Wiley & Sons, 1994.
26. R. Milner, J. Parrow and D. Walker, A calculus of mobile processes, Parts I + II, Information and Computation 100(1) (1992), 1-77.
27. G.C. Necula and P. Lee, Safe, untrusted agents using proof-carrying code, in: Mobile Agents and Security, Vol. 1419 of LNCS, G. Vigna, ed., SV, 1998, pp. 61-91.
28. J. Palsberg and P. Ørbæk, Trust in the lambda-calculus, Journal of Functional Programming 7(6) (1997), 557-591.
29. B.C. Pierce and D.N. Turner, Pict: A programming language based on the pi-calculus, in: Proof, Language and Interaction: Essays in Honour of Robin Milner, G. Plotkin, C. Stirling and M. Tofte, eds, MIT Press, 1999.
30. J. Riely and M. Hennessy, A typed language for distributed mobile processes, in: Proceedings of the 25th POPL, 1998.
31. A. Sabelfeld and D. Sands, A PER model of secure information flow in sequential programs, in: Proceedings of European Symposium on Programming, Amsterdam, Netherlands, 1999.
32. P. Sewell, Global/local subtyping and capability inference for a distributed π-calculus, in: Proceedings of ICALP '98, LNCS 1443, 1998, pp. 695-706.
33. P. Sewell, Applied π - a brief tutorial, Technical Report 498, Computer Laboratory, University of Cambridge, Aug. 2000.
34. P. Sewell and J. Vitek, Secure composition of insecure components, Technical Report 463, Computer Laboratory, University of Cambridge, Apr. 1999.
35. P. Sewell and J. Vitek, Secure composition of insecure components, in: Proceedings of the 12th IEEE Computer Security Foundations Workshop (CSFW-12), Mordano, Italy, 1999.
36. P. Sewell and J. Vitek, Secure composition of untrusted code: Wrappers and causality types, Technical Report 478, Computer Laboratory, University of Cambridge, Nov. 1999.
37. P. Sewell and J. Vitek, Secure composition of untrusted code: Wrappers and causality types, in: Proceedings of CSFW 00: The 13th IEEE Computer Security Foundations Workshop, IEEE Computer Society, 2000, pp. 269-284.
38. P. Sewell, P.T. Wojciechowski and B.C. Pierce, Location-independent communication for mobile agents: a two-level architecture, in: Internet Programming Languages, LNCS 1686, Springer-Verlag, 1999.
39. G. Smith and D. Volpano, Secure information flow in a multi-threaded imperative language, in: Conference Record of POPL '98: The 25th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, San Diego, California, 1998, pp. 355-364.
40. J. Vitek and G. Castagna, Towards a calculus of mobile computations, in: Workshop on Internet Programming Languages, Chicago, 1998.
41. J.-L. Vivas and M. Dam, From higher-order pi-calculus to pi-calculus in the presence of static operators, in: CONCUR '98: Concurrency Theory (9th International Conference), Nice, France, D. Sangiorgi and R. de Simone, eds, Vol. 1466 of LNCS, SV, 1998, pp. 115-130.
42. D. Volpano and G. Smith, Confinement properties for programming languages, SIGACT News 29(3) (1998), 33-42.
43. D. Volpano, G. Smith and C. Irvine, A sound type system for secure flow analysis, Journal of Computer Security 4(3) (1996), 1-21.
44. D.S. Wallach, D. Balfanz, D. Dean and E.W. Felten, Extensible security architectures for Java, in: Proceedings of the 16th Symposium on Operating System Principles, 1997.
45. G. Winskel and M. Nielsen, Models for concurrency, in: Handbook of Logic in Computer Science, S. Abramsky, D.M. Gabbay and T.S.E. Maibaum, eds, Vol. IV, Oxford University Press, 1995, pp. 1-148.
46. S. Zdancewic, D. Grossman and G. Morrisett, Principals in programming languages: A syntactic proof technique, in: International Conference on Functional Programming, Paris, France, 1999.