Downgrading policies and relaxed noninterference

Conference Record of the Annual ACM Symposium on Principles of Programming Languages

Volumn , Issue , 2005, Pages 158-170

  Li, Peng ^a   Zdancewic, Steve ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

Downgrading policies; Information flow; Language based security; Program equivalence; Relaxed noninterference

Indexed keywords

COMPUTER PROGRAMMING LANGUAGES; DATA PROCESSING; PUBLIC POLICY;

DOWNGRADING POLICIES; PROGRAM EQUIVALENCE; RELAXED NONINTERFERENCE;

SECURITY OF DATA;

EID: 28144461940     PISSN: 07308566     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1040305.1040319     Document Type: Conference Paper

References (20)

1. Anindya Banerjee and David A. Naumann. Secure information flow and pointer confinement in a java-like language. In Proc. of the 15th IEEE Computer Security Foundations Workshop, 2002.
2. Hubie Chen and Stephen Chong. Owned policies for information security. In Proc. of the IEEE Computer Security Foundations Workshop, 2004.
3. R. Giacobazzi and I. Mastroeni. Abstract non-interference: Parameterizing non-interference by abstract interpretation. In Proc. 31st ACM Symp. on Principles of Programming Languages (POPL), pages 186-197, January 2004.
4. J. A. Goguen and J. Meseguer. Security policies and security models, In Proc. IEEE Symposium on Security and Privacy, pages 11-20, IEEE Computer Society Press, April 1982.
5. James W. Gray, III. Towards a mathematical foundation for information flow security. In Proc. IEEE Symposium on Security and Privacy, pages 21-34. IEEE Computer Society Press, 1991.
6. Gavin Lowe. Quantifying information flow. In Proc. of the IEEE Computer Security Foundations Workshop, pages 18-31. IEEE Computer Society Press, 2002.
7. Heiko Mantel and David Sands. Controlled declassification based on intransitive noninterference. In Proceedings of The Second Asian Symposium on Programming Languages and Systems, volume 3302 of LNCS. Springer, 2004.
8. John McLean. Security models and information flow. In Proc. IEEE Symposium on Security and Privacy, pages 180-187. IEEE Computer Society Press, 1990.
9. Andrew C. Myers. JFlow. Practical mostly-static information flow control. In Proc. 26th ACM Symp. on Principles of Programming Languages (POPL), pages 228-241, San Antonio, TX, January 1999.
10. Andrew C. Myers and Barbara Liskov. Protecting privacy using the decentralized label model, ACM Transactions on Software Engineering and Methodology, 9(4):410-442, 2000.
11. Andrew C Myers, Andrei Sabelfeld, and Steve Zdancewic. Enforcing robust declassification. In Proc. of the 17th IEEE Computer Security Foundations Workshop, pages 172-186. IEEE Computer Society Press, June 2004.
12. Alessandra Di Pierro, Chris Hankin, and Herbert Wiklicky. Approximate non-interference. In Proc. of the IEEE Computer Security Foundations Workshop, pages 1-17. IEEE Computer Society Press, 2002.
13. François Pettier and Sylvain Conchon. Information flow inference for free, In Proc. 5th ACM SIGPLAN International Conference on Functional Programming (ICFP), pages 46-57, September 2000.
14. François Pettier and Vincent Simonet. Information flow inference for ML. In Proc. 29th ACM Symp. on Principles of Programming Languages (POPL), Portland, Oregon, January 2002.
15. A. W. Roscoe and M. H. Goldsmith. What is intransitive noninterference? In Proc. of the 12th IEEE Computer Security Foundations Workshop, 1999.
16. Andrei Sabelfeld and Andrew Myers. A model for delimited information release. In Proceedings of the International Symposium on Software Security (ISSS'03), 2004.
17. Andrei Sabelfeld and Andrew C. Myers. Language-based information-flow security, IEEE Journal on Selected Areas in Communications, 21(1):5-19, January 2003.
18. Dennis Volpano and Geoffrey Smith. Verifying secrets and relative secrecy. In Proc. 27th ACM Symp. on Principles of Programming Languages (POPL), pages 268-276, ACM Press, January 2000.
19. Dennis Volpano, Geoffrey Smith, and Cynthia Irvine. A sound type system for secure flow analysis. Journal of Computer Security, 4(3):167-187, 1996.
20. Steve Zdancewic and Andrew C. Myers. Robust declassification. In Proc. of 14th IEEE Computer Security Foundations Workshop, Cape Breton, Canada, June 2001. IEEE Computer Society Press.