A unifying approach to the security of distributed and multi-threaded programs

Journal of Computer Security

Volumn 11, Issue 4, 2003, Pages 615-676

  Mantel, Heiko ^a   Sabelfeld, Andrei ^b  

^a GERMAN RESEARCH CENTER FOR ARTIFICIAL INTELLIGENCE DFKI   (Germany)

^b Department of Computer Science and School of Operations Research and Information Engineering   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER PROGRAM LISTINGS; COMPUTER PROGRAMMING LANGUAGES; DISTRIBUTED COMPUTER SYSTEMS; LARGE SCALE SYSTEMS; PROBLEM SOLVING; THEOREM PROVING;

MULTI-THREADED PROGRAMS;

SECURITY OF DATA;

EID: 0141528662     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2003-11406     Document Type: Conference Paper

References (50)

1. M. Abadi, A. Banerjee, N. Heintze and J. Riecke, A core calculus of dependency, in: Proceedings of the ACM Symposium on Principles of Programming Languages, 1999, pp. 147-160.
2. J. Agat, Transforming out timing leaks, in: Proceedings of the ACM Symposium on Principles of Programming Languages, 2000, pp. 40-53.
3. J. Agat and D. Sands, On confidentiality and algorithms, in: Proceedings of the IEEE Symposium on Security and Privacy, 2001, pp. 64-77.
4. G.R. Andrews, Foundations of Multithreaded, Parallel, and Distributed Programming, Addison-Wesley, 2000.
5. J. Armstrong, R. Virding, C. Wikström and M. Williams, Concurrent Programming in Erlang, 2nd edn, Prentice-Hall, 1996.
6. N. Carriero and D. Gelernter, Linda in context, Communications of the ACM 32(4) (1989), 444-458.
7. E.S. Cohen, Information transmission in computational systems, ACM SIGOPS Operating Systems Review 11(5) (1977), 133-139.
8. E.S. Cohen, Information transmission in sequential programs, in: Foundations of Secure Computation, R.A. DeMillo, D.P. Dobkin, A.K. Jones and R.J. Lipton, eds, Academic Press, 1978, pp. 297-335.
9. B. Davey and H. Priestley, Introduction to Lattices and Order, Cambridge University Press, 1990.
10. D.E. Denning, A lattice model of secure information flow, Communications of the ACM 19(5) (1976), 236-243.
11. D.E. Denning and P.J. Denning, Certification of programs for secure information flow, Communications of the ACM 20(7) (1977), 504-513.
12. R. Focardi and R. Gorrieri, A classification of security properties for process algebras, Journal of Computer Security 3(1) (1995), 5-33.
13. R. Focardi, R. Gorrieri and F. Martinelli, Information flow analysis in a discrete-time process algebra, in: Proceedings of the IEEE Computer Security Foundations Workshop, 2000, pp. 170-184.
14. S.N. Foley, A universal theory of information flow, in: Proceedings of the IEEE Symposium on Security and Privacy. 1987, pp. 116-122.
15. J.A. Goguen and J. Meseguer. Security policies and security models, in: Proceedings of the IEEE Symposium on Security and Privacy, 1982. pp. 11-20.
16. J. Gosling, B. Joy and G. Steele, The Java Language Specification, Addison-Wesley, 1996.
17. J.W. Gray, Toward a mathematical foundation for information flow security, in: Proceedings of the IEEE Symposium on Security and Privacy, 1991. pp. 21-35.
18. J.D. Guttman and M.E. Nadel, What needs securing? in: Proceedings of the IEEE Computer Security Foundations Workshop, 1988, pp. 34-57.
19. N. Heintze and J.G. Riecke. The SLam calculus: programming with secrecy and integrity, in: Proceedings of the ACM Symposium on Principles of Programming Languages, 1998, pp. 365-377.
20. D.M. Johnson and F.J. Thayer. Security and the composition of machines, in: Proceedings of the IEEE Computer Security Foundations Workshop, 1988, pp. 72-89.
21. R. Joshi and K.R.M. Leino, A semantic approach to secure information flow, Science of Computer Programming 37(1-3) (2000), 113-138.
22. H. Mantel, Possibilistic definitions of security - An assembly kit, in: Proceedings of the IEEE Computer Security Foundations Workshop, 2000, pp. 185-199.
23. H. Mantel, Unwinding possibilistic security properties, in: Proceedings of the European Symposium on Research in Computer Security, Volume 1895 of LNCS, Springer-Verlag, 2000, pp. 238-254.
24. H. Mantel, Information flow control and applications - Bridging a gap. in: Proceedings of the International Symposium of Formal Methods Europe, Volume 2021 of LNCS, Springer-Verlag, 2001, pp. 153-172.
25. H. Mantel, Preserving information flow properties under refinement, in: Proceedings of the IEEE Symposium on Security and Privacy, 2001, pp. 78-91.
26. H. Mantel, On the composition of secure systems, in: Proceedings of the IEEE Symposium on Security and Privacy, 2002, pp. 88-101.
27. H. Mantel and A. Sabelfeld, A generic approach to the security of multi-threaded programs, in: Proceedings of the IEEE Computer Security Foundations Workshop, 2001, pp. 126-142.
28. D. McCullough, Specifications for multi-level security and hook-up property, in: Proceedings of the IEEE Symposium on Security and Privacy, 1987, pp. 161-166.
29. J. McLean. Security models and information flow, in: Proceedings of the IEEE Symposium on Security and Privacy, 1990, pp. 180-187.
30. J. McLean, Proving noninterference and functional correctness using traces. Journal of Computer Security 1(1) (1992), 37-58.
31. J. McLean, A general theory of composition for trace sets closed under selective interleaving functions, in: Proceedings of the IEEE Symposium on Security and Privacy. 1994, pp. 79-93.
32. A.W. Roscoe, CSP and determinism in security modeling, in: Proceedings of the IEEE Symposium on Security and Privacy, 1995, pp. 114-127.
33. A.W. Roscoe, J.C.P. Woodcock and L. Wulf, Non-interference through determinism, in: Proceedings of the European Symposium on Research in Computer Security, Volume 875 of LNCS, Springer-Verlag, 1994, pp. 33-53.
34. P. Ryan and S. Schneider, Process algebra and non-interference, in: Proceedings of the IEEE Computer Security Foundations Workshop, 1999, pp. 214-227.
35. A. Sabelfeld, The impact of synchronisation on secure information flow in concurrent programs, in: Proceedings of the Andrei Ershov International Conference on Perspectives of System Informatics, Volume 2244 of LNCS, Springer-Verlag, 2001, pp. 227-241.
36. A. Sabelfeld and H. Mantel, Static confidentiality enforcement for distributed programs, in: Proceedings of the International Symposium on Static Analysis. Volume 2477 of LNCS, Springer-Verlag, 2002, pp. 376-394.
37. A. Sabelfeld and A.C. Myers, Language-based information-flow security, IEEE Journal on Selected Areas in Communication (2002) (to appear). Available via http://www.cs.cornell.edu/̃andrei.
38. A. Sabelfeld and D. Sands, Probabilistic noninterference for multi-threaded programs, in: Proceedings of the IEEE Computer Security Foundations Workshop, 2000, pp. 200-214.
39. A. Sabelfeld and D. Sands, A per model of secure information flow in sequential programs, Higher Order and Symbolic Computation 14(1) (2001), 59-91.
40. G. Smith, A new type system for secure information flow, in: Proceedings of the IEEE Computer Security Foundations Workshop, 2001, pp. 115-125.
41. G. Smith, Weak probabilistic bisimulation for secure information flow, in: Proceedings of the Workshop on Issues in the Theory of Security, 2002.
42. G. Smith and D. Volpano, Secure information flow in a multi-threaded imperative language, in: Proceedings of the ACM Symposium on Principles of Programming Languages, 1998, pp. 355-364.
43. D. Sutherland, A model of information, in: Proceedings of the 9th National Computer Security Conference, 1986, pp. 175-183.
44. D. Volpano and G. Smith, Probabilistic noninterference in a concurrent language, Journal of Computer Security 7(2-3) (1999), 231-253.
45. D. Volpano, G. Smith and C. Irvine, A sound type system for secure flow analysis, Journal of Computer Security 4(3) (1996), 167-187.
46. J.T. Wittbold and D.M. Johnson, Information flow in nondeterministic systems, in: Proceedings of the IEEE Symposium on Security and Privacy, 1990, pp. 144-161.
47. A. Zakinthinos and E.S. Lee, The composability of non-interference, in: Proceedings of the IEEE Computer Security Foundations Workshop, 1995, pp. 2-8.
48. A. Zakinthinos and E.S. Lee, How and why feedback composition fails, in: Proceedings of the IEEE Computer Security Foundations Workshop, 1996, pp. 95-101.
49. A. Zakinthinos and E.S. Lee, A general theory of security properties, in: Proceedings of the IEEE Symposium on Security and Privacy, 1997, pp. 94-102.
50. S. Zdancewic, L. Zheng, N. Nystrom and A.C. Myers, Untrusted hosts and confidentiality: Secure program partitioning, in: Proceedings of the ACM Symposium on Operating System Principles, 2001, pp. 1-14.