Security policies for downgrading

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2004, Pages 198-209

  Chong, Stephen ^a   Myers, Andrew C ^a  

^a Cornell University ^*  (United States)

Author keywords

Declassification; Downgrading; Information flow; Noninterference; Security policies

Indexed keywords

CLASSIFICATION (OF INFORMATION); COMPUTER PROGRAMMING LANGUAGES; DATA TRANSFER; INFORMATION SERVICES; SEMANTICS; SIGNAL INTERFERENCE;

DECLASSIFICATION; DOWNGRADING; INFORMATION FLOW; NONINTERFERENCE; SECURITY POLICIES;

SECURITY OF DATA;

EID: 14844300105     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1030083.1030110     Document Type: Conference Paper

References (32)

1. J. Agat. Transforming out timing leaks. In Proc. 27th ACM Symp. on Principles of Programming Languages (POPL), pages 40-53, Boston, MA, Jan. 2000.
2. A. Banerjee and D. A. Naumann. Secure information flow and pointer confinement in a Java-like language. In IEEE Computer Security Foundations Workshop (CSFW), June 2002.
3. A. Banerjee and D. A. Naumann. Using access control for secure information flow in a java-like language. In Proc. 16th IEEE Computer Security Foundations Workshop, pages 155-169, June 2003.
4. A. Di Pierro, C. Hankin, and H. Wiklicky. Approximate non-interference. In Proc. 15th IEEE Computer Security Foundations Workshop, pages 1-15, June 2002.
5. E. Ferrari, P. Samarati, E. Bertino, and S. Jajodia. Providing flexibility in information flow control for object-oriented systems. In Proc. IEEE Symposium on Security and Privacy, pages 130-140, Oakland, CA, USA, May 1997.
6. J. A. Goguen and J. Meseguer. Security policies and security models. In Proc. IEEE Symposium on Security and Privacy, pages 11-20, Apr. 1982.
7. J. W. Gray, III. Towards a mathematical foundation for information flow security. In Proc. IEEE Symposium on Security and Privacy, pages 21-34, 1991.
8. N. Heintze and J. G. Riecke. The SLam calculus: Programming with secrecy and integrity. In Proc. 25th ACM Symp. on Principles of Programming Languages (POPL), pages 365-377, San Diego, California, Jan. 1998.
9. K. Honda and N. Yoshida. A uniform type structure for secure information flow. In Proc. 29th ACM Symp. on Principles of Programming Languages (POPL), pages 81-92. ACM Press, Jan. 2002.
10. G. Lowe. Quantifying information flow. In Proc. 15th IEEE Computer Security Foundations Workshop, June 2002.
11. H. Mantel and D. Sands. Controlled downgrading based on intransitive (non)interference. Unpublished draft, 2003.
12. J. K. Millen. Covert channel capacity. In Proc. IEEE Symposium on Security and Privacy, Oakland, CA, 1987.
13. A. C. Myers. JFlow: Practical mostly-static information flow control. In Proc. 26th ACM Symp. on Principles of Programming Languages (POPL), pages 228-241, San Antonio, TX, Jan. 1999.
14. A. C. Myers and B. Liskov. A decentralized model for information flow control. In Proc. 17th ACM Symp. on Operating System Principles (SOSP), pages 129-142, Saint-Malo, France, 1997.
15. A. C. Myers and B. Liskov. Complete, safe information flow with decentralized labels. In Proc. IEEE Symposium on Security and Privacy, pages 186-197, Oakland, CA, USA, May 1998.
16. A. C. Myers, A. Sabelfeld, and S. Zdancewic. Enforcing robust declassification. In Proc. 17th IEEE Computer Security Foundations Workshop, June 2004. to appear.
17. J. Palsberg and P. Ørbæk. Trust in the λ-calculus. In Proc. 2nd International Symposium on Static Analysis, number 983 in Lecture Notes in Computer Science, pages 314-329. Springer, Sept. 1995.
18. S. Pinsky. Absorbing covers and intransitive non-interference. In Proc. IEEE Symposium on Security and Privacy, pages 102-113, 1995.
19. F. Pettier and S. Conchon. Information flow inference for free. In Proc. 5nd ACM SIGPLAN International Conference on Functional Programming (ICFP), pages 46-57, 2000.
20. F. Pottier and V. Simonet. Information flow inference for ML. In Proc. 29th ACM Symp. on Principles of Programming Languages (POPL), pages 319-330, 2002.
21. A. W. Roscoe and M. H. Goldsmith. What is intransitive noninterference? In Proc. 12th IEEE Computer Security Foundations Workshop, 1999.
22. J. Rushby. Noninterference, transitivity and channel-control security policies. Technical Report CSL-92-02, SRI, Dec. 1992.
23. A. Sabelfeld and D. Sands. Probabilistic noninterference for multi-threaded programs. In Proc. 13th IEEE Computer Security Foundations Workshop, pages 200-214. IEEE Computer Society Press, July 2000.
24. D. Volpano and G. Smith. A type-based approach to program security. In Proceedings of the 7th International Joint Conference on the Theory and Practice of Software Development, pages 607-621, 1997.
25. D. Volpano and G. Smith. Verifying secrets and relative secrecy. In Proc. 27th ACM Symp. on Principles of Programming Languages (POPL), pages 268-276, Boston, MA, Jan. 2000.
26. D. Volpano, G. Smith, and C. Irvine. A sound type system for secure flow analysis. Journal of Computer Security, 4(3):167-187, 1996.
27. S. Zdancewic. A type system for robust declassification. In Proceedings of the Nineteenth Conference on the Mathematical Foundations of Programming Semantics, Electronic Notes in Theoretical Computer Science, Mar. 2003.
28. S. Zdancewic and A. C. Myers. Robust declassification. In Proc. 14th IEEE Computer Security Foundations Workshop, pages 15-23, Cape Breton, Nova Scotia, Canada, June 2001.
29. S. Zdancewic and A. C. Myers. Secure information flow and CPS. In Proc. 10th European Symposium on Programming, volume 2028 of Lecture Notes in Computer Science, pages 46-61, 2001.
30. S. Zdancewic and A. C. Myers. Observational determinism for concurrent program security. In Proc. 16th IEEE Computer Security Foundations Workshop, pages 29-43, Pacific Grove, California, June 2003.
31. S. Zdancewic, L. Zheng, N. Nystrom, and A. C. Myers. Untrusted hosts and confidentiality: Secure program partitioning. In Proc. 18th ACM Symp. on Operating System Principles (SOSP), pages 1-14, Banff, Canada, Oct. 2001.
32. L. Zheng and A. C. Myers. Dynamic security labels and noninterference. Technical Report 2004-1924, Cornell University Computing and Information Science, 2004.