Dynamic label binding at run-time

Proceedings New Security Paradigms Workshop

Volumn , Issue , 2004, Pages 39-46

  Beres, Yolanta ^a   Dalton, Chris I ^a  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

Author keywords

Data labeling; Information flow control; Labels

Indexed keywords

CALCULATIONS; CODES (SYMBOLS); COMPUTER CRIME; COMPUTER PROGRAMMING LANGUAGES; DATA TRANSFER; INFORMATION DISSEMINATION; LABELS; MANIPULATORS; MILITARY APPLICATIONS;

COMPILE-TIME TYPE CHECKING; DATA LABELING; INFORMATION FLOW CONTROL; TRUSTED COMPUTED BASE;

SECURITY OF DATA;

EID: 17644378117     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (30)

1. A. Appel and S. Govindavajhala. "Using Memory Errors to Attack a Virtual Machine". In Proc. of IEEE Symposium on Security and Privacy, 2003.
2. V. Bala, E. Duesterwald, and S. Banerjia. "Dynamo: A transparent runtime optimization system." In Proc. of ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '00), June 2000.
3. J.-P. Ban̂atre, C. Bryce, and D. Le M'etayer. "Compile-time detection of information flow in sequential programs". In Proc. of European Symposium on Research in Computer Security, 1994.
4. D. E. Bell and L. J. LaPadula, "Secure computer systems: A mathematical model." Tech. Rep. MTR-2547, Vol. 2, MITRE Corp., Bedford, MA, 1973.
5. D. E. Bell and L. J. LaPadula, "Secure computer systems: Mathematical foundations." Tech. Rep. MTR-2547, Vol. 1, MITRE Corp., Bedford, MA, 1973.
6. J. Brown, T.F. Knight, Jr. "A Minimal Trusted Computing Base for Dynamically Ensuring Secure Information Flow". Project Aries Technical Memo ARIES-TM-015, MIT, November 2001.
7. D. Clark, S. Hunt, and P. Malacaria, "Quantitative Analysis of the Leakage of Confidential Data." Electronic Notes in Theoretical Computer Science, vol. 59, no. 3, 2001.
8. C Cifuentes, D Simon and A Fraboulet, "Assembly to High-Level Language Translation". In Proc. of the International Conference on Software Maintenance, November 1998.
9. C Cifuentes and A Fraboulet, "Intel-procedural Data Flow Recovery of High-level Language Code from Assembly". Technical Report 421, Department of Computer Science and Electrical Engineering, The University of Queensland, December 1997.
10. D. E. Denning, "A Lattice Model of Secure Execution." In Communications of the ACM, vol. 19, no. 5, May 1976.
11. D. E. Denning and P. J. Denning, "Certification of programs for secure information flow." Communications of the ACM, vol. 20, no. 7, July 1977.
12. Department of Defense, Department of Defense Trusted Computer System Evaluation Criteria, DOD 5200.28-STD (The Orange Book) edition, Dec. 1985.
13. DynamoRIO System Overview. http://www.cag.lcs.mit.edu/dynamorio/doc/ DynamoRIO.htm
14. J. S. Fenton, "Memoryless subsystems." Computing Journal, vol. 17, no. 2, pp. 143-147, May 1974.
15. S. N. Foley, Li Gong, and X. Qian, "A Security Model of Dynamic Labeling Providing a Tiered Approach to Verification", In Proc. of IEEE Symposium on Security and Privacy, 1996.
16. T. Fraser, "LOMAC: Low Water-Mark Integrity Protection for COTS Environments." In Proc. of IEEE Symposium on Security and Privacy, May 2000.
17. P. Herrmann, "Information Flow Analysis of Component-Structured Applications." In Proc. of 17th Annual Computer Security Applications Conference (ACSAC'01), December 2001.
18. Hewlett-Packard Co. (1996) HP-UX 10.16 CMW Security Features Guide.
19. A.K. Jones and R. J. Lipton, "The enforcement of security policies for computation." In Proc. of 5th Symposium on Operating Systems Principles, November 1975.
20. V. Kiriansky, D. Bruening, and S. Amarasinghe, "Secure Execution Via Program Shepherding." In Proc. of 11th USENIX Security Symposium, August 2002.
21. J. McHugh, D. I. Good, "An Information Flow Tool for Gypsy". In Proc. of IEEE Symposium on Security and Privacy, 1985.
22. J. McHugh, "An Information Flow Tool for Gypsy: An Extended Abstract Revisited". In Proc. of Annual Computer Security Applications Conference, December 2001.
23. C. Myers, "JFlow: Practical mostly-static information flow control." In Proc. of ACM Symposium on Principles of Programming Languages, January 1999.
24. C. Myers and B. Liskov, "A decentralized model for information flow control." In Proc. of ACM Symposium on Operating System Principles, October 1997.
25. A. Sabelfeld and A. C. Myers, "Language-Based Information-Flow Security." IEEE Journal on Selected Areas in Communications, vol. 21, no. 1, January 2003.
26. A. Sabelfeld and D. Sands, "Probabilistic noninterference for multithreaded programs." In Proc. of IEEE Computer Security Foundations Workshop, July 2000.
27. F. B. Schneider and U. Erlingsson, "SASI Enforcement of Security Policies: a Retrospective." In Proc. of New Security Paradigms Workshop, 1999.
28. J. Sugerman, G. Venkitachalam, and Beng-Hong Lim, "Virtualizing I/O Devices on VMware Workstation's Hosted Virtual Machine Monitor." In Proc. of USENIX Annual Technical Conference, June 2001.
29. D. Volpano, G. Smith, and C. Irvine, "A sound type system for secure flow analysis." Journal of Computer Security, vol. 4, no. 3, pp. 167-187, 1996.
30. th SENIX Security Symposium, August 2002.