Static verification of code security policy compliance ofNET applications

Journal of Object Technology

Volumn 5, Issue 3, 2006, Pages 35-58

  Smans, Jan ^a,b   Jacobs, Bart ^a,c   Piessens, Frank ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

^b FUND FOR SCIENTIFIC RESEARCH   (Belgium)

^c Scientific Research   (Belgium)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 33646428649     PISSN: 16601769     EISSN: 16601769     Source Type: Journal    
DOI: 10.5381/jot.2006.5.3.a2     Document Type: Article

References (14)

1. Drew Dean, Edward W. Felten, Dan S. Wallach and Dirk Balfanz. Java Security: Web Browsers and Beyond. Technical Report 566-97, Department of Computer Science, Princeton University, February 1997
2. Larry Koved, Marco Pistoia and Aaron Kershenbaum. Access Rights Analysis for Java. In Proceedings of the 17th Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), 2002
3. Francois Pottier, Christian Skalka and Scott Smith. A Systematic Approach to Static Access Control. ACM Transactions on Programming Languages and Systems, volume 27, number 2, 2005
4. Mike Barnett, K. Rustan M. Leino and Wolfram Schulte. The Spec# Programming System: An Overview. In CASSIS 2004, LNCS vol. 3362, Springer, 2004
5. David Stutz, Ted Neward and Geoff Shilling. Shared Source CLI Essentials. O'Reilly, 2003
6. Dan S. Wallach, Andrew W. Appel and Edward W. Felten. SAFKASI: A security mechanism for language-based systems. ACM Transactions on Software Engineering and Methodology, volume 9, number 4, 2000
7. Brian A. LaMacchia, Sebastian Lange, Matthew Lyons, Rudi Martin, Kevin T. Price.NET Framework Security. Addison wesley, 2002
8. Adam Darvas and Peter Müller. Reasoning about Method Calls in JML Specifications. Formal Techniques for Java-like Programs, 2005
9. Jan Smans, Bart Jacobs and Frank Piessens. www.cs.kuleuven.ac.be/~jans/ casverify, February 2006
10. Martin Abadi and Cédric Fournet. Access Control based on Execution History. In Proceedings of the 10th Annual Network and Distributed System Symposium (NDSS'03), 2003
11. Jan Smans, Bart Jacobs and Frank Piessens. Static Verification of Code Access Security Policy Compliance ofNET Applications. In Proceedings of the Third International Conference onNET Technologies, 2005
12. Frederic Besson. Tomasz Blanc. Cédric Fournet and Andrew Gordon. From Stack Inspection to Access Control: A Security Analysis for Libraries. 17th IEEE Computer Security Foundations Workshop. 2004
13. Mariela Pavlova, Gilles Barthe, Lilian Burdy, Marieke Huisman and Jean-Louis Lanet. Enforcing High-level Security Properties for Applets, Smart Card Research and Advanced Applications (CARDIS), 2004
14. Cédric Fournet and Anrew Gordon. Stack Inspection: theory and variants. Symposium on Principles of Programming Languages, 2002