Enforcing non-safety security policies with program monitors

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3679 LNCS, Issue , 2005, Pages 355-373

  Ligatti, Jay ^a   Bauer, Lujo ^b   Walker, David ^a  

^a Princeton University   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

RENEWAL PROPERTIES; SAFETY PROPERTY; SECURITY POLICIES; SECURITY-SENSITIVE ACTIONS;

ACCIDENT PREVENTION; COMPUTER PROGRAMMING; MONITORING; RENEWABLE ENERGY RESOURCES; SENSITIVITY ANALYSIS;

SECURITY OF DATA;

EID: 33646066871     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11555827_21     Document Type: Conference Paper

References (26)

1. M. Abadi and C. Fournet. Access control based on execution history. In Proceedings of the 10th Annual Network and Distributed System Symposium, Feb. 2003.
2. B. Alpern and F. Schneider. Recognizing safety and liveness. Distributed Computing, 2:117-126, 1987.
3. B. Alpern and F. B. Schneider. Defining liveness. Information Processing Letters, 21(4):181-185, Oct. 1985.
4. L. Bauer, J. Ligatti, and D. Walker. Types and effects for non-interfering program monitors. In M. Okada, B. Pierce, A. Scedrov, H. Tokuda, and A. Yonezawa, editors, Software Security - Theories and Systems. Mext-NSF-JSPS International Symposium, ISSS 2002, Tokyo, Japan, November 8-10, 2002, Revised Papers, volume 2609 of Lecture Notes in Computer Science. Springer, 2003.
5. L. Bauer, J. Ligatti, and D. Walker. Composing security policies with polymer. In Proceedings of the ACM SIGPLAN 2005 Conference on Programming Language Design and Implementation, Chicago, June 2005.
6. D. F. C. Brewer and M. J. Nash. The Chinese wall security policy. In Proceedings of the IEEE Symposium on Security and Privacy, pages 206-214, 1989.
7. G. Edjlali, A. Acharya, and V. Chaudhary. History-based access control for mobile code. In ACM Conference on Computer and Communications Security, pages 38-48, 1998.
8. Ú. Erlingsson. The Inlined Reference Monitor Approach to Security Policy Enforcement. PhD thesis, Cornell University, Jan. 2004.
9. Ú. Erlingsson and F. B. Schneider. SASI enforcement of security policies: A retrospective. In Proceedings of the New Security Paradigms Workshop, pages 87-95, Caledon Hills, Canada, Sept. 1999.
10. Ú. Erlingsson and F. B. Schneider. IRM enforcement of Java stack inspection. In Proceedings of the IEEE Symposium on Security and Privacy, pages 246-255, Oakland, California, May 2000.
11. D. Evans and A. Twyman. Flexible policy-directed code safety. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, May 1999.
12. P. W. L. Fong. Access control by tracking shallow execution history. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, California, USA, May 2004.
13. K. Hamlen, G. Morrisett, and F. Schneider. Computability classes for enforcement mechanisms. Technical Report TR2003-1908, Cornell University, Aug. 2003.
14. C. Jeffery, W. Zhou, K. Templer, and M. Brazell. A lightweight architecture for program execution monitoring. In PASTE '98: Proceedings of the 1998 ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering, pages 67-74. ACM Press, 1998.
15. G. Kiczales, J. Irwin, J. Lamping, J.-M. Loingtier, C. V. Lopes, C. Maeda, and A. Mendhekar. Aspect-oriented programming. ACM Comput. Surv., 28(4es):154, 1996.
16. M. Kim, S. Kannan, I. Lee, O. Sokolsky, and M. Viswantathan. Computational analysis of run-time monitoring - fundamentals of Java-MaC. In Run-time Verification, June 2002.
17. M. Kim, M. Viswanathan, H. Ben-Abdallah, S. Kannan, I. Lee, and O. Sokolsky. Formally specified monitoring of temporal properties. In European Conference on Real-time Systems, York, UK, June 1999.
18. L. Lamport. Proving the correctness of multiprocess programs. IEEE Transactions of Software Engineering, 3(2):125-143, 1977.
19. J. Ligatti, L. Bauer, and D. Walker. Edit automata: Enforcement mechanisms for run-time security policies. Technical Report TR-681-03, Princeton University, May 2003.
20. J. Ligatti, L. Bauer, and D. Walker. Edit automata: Enforcement mechanisms for run-time security policies. International Journal of Information Security, 4(1-2):2-16, Feb. 2005.
21. J. Ligatti, L. Bauer, and D. Walker. Enforcing non-safety security policies with program monitors. Technical Report TR-720-05, Princeton University, Jan. 2005.
22. N. A. Lynch and M. R. Tuttle. Hierarchical correctness proofs for distributed algorithms. In Proceedings of the 6th annual ACM Symposium on Principles of distributed computing, pages 137-151. ACM Press, 1987.
23. W. H. Paxton. A client-based transaction system to maintain data integrity. In Proceedings of the 7th ACM symposium on Operating systems principles, pages 18-23. ACM Press, 1979.
24. F. B. Schneider. Enforceable security policies. ACM Transactions on Information and Systems Security, 3(1):30-50, Feb. 2000.
25. M. Viswanathan. Foundations for the Run-time Analysis of Software Systems. PhD thesis, University of Pennsylvania, 2000.
26. R. Wahbe, S. Lucco, T. Anderson, and S. Graham. Efficient software-based fault isolation. In Proceedings of the 14th Symposium on Operating Systems Principles, pages 203-216, Asheville, Dec. 1993.