Composing security policies with polymer

ACM SIGPLAN Notices

Volumn 40, Issue 6, 2005, Pages 305-314

  Bauer, Lujo ^a   Ligatti, Jay ^b   Walker, David ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b PRINCETON UNIVERSITY   (United States)

Author keywords

Composable security policies; Edit automata; Program monitors; Run time enforcement; Security automata

Indexed keywords

COMPOSABLE SECURITY POLICIES; EDIT AUTOMATA; PROGRAM MONITORS; RUN-TIME ENFORCEMENT; SECURITY AUTOMATA;

DATA HANDLING; ELECTRONIC MAIL; JAVA PROGRAMMING LANGUAGE; SECURITY OF DATA; SEMANTICS;

COMPUTER NETWORKS;

EID: 33745267229     PISSN: 03621340     EISSN: 03621340     Source Type: Journal    
DOI: 10.1145/1064978.1065047     Document Type: Article

References (20)

1. M. Abadi and C. Fournet. Access control based on execution history. In 10th Annual Network and Distributed System Security Symposium, 2003.
2. O. Agesen, S. N. Freund, and J. C. Mitchell. Adding type parameterization to the Java language. In Object Oriented Programing: Systems, Languages, and Applications (OOPSLA), Oct. 1997.
3. Apache Software Foundation. Byte Code Engineering Library, 2003. http://jakarta.apache.org/bcel/.
4. L. Bauer, A. W. Appel, and E. W. Felten. Mechanisms for secure modular programming in Java. Software - Practice and Experience, 33(5):461-480, 2003.
5. L. Bauer, J. Ligatti, and D. Walker. A language and system for composing security policies. Technical Report TR-699-04, Princeton University, Jan. 2004.
6. T. Colcombet and P. Fradet. Enforcing trace properties by program transformation. In Twenty-Seventh ACM Symposium on Principles of Programming Languages, pages 54-66, Boston, Jan. 2000. ACM Press.
7. Ú. Erlingsson and F. B. Schneider. IRM enforcement of Java stack inspection. In IEEE Symposium on Security and Privacy, Oakland, CA, May 2000.
8. D. Evans and A. Twyman. Flexible policy-directed code safety. In IEEE Security and Privacy, Oakland, CA, May 1999.
9. C. Fournet and A. Gordon. Stack inspection: Theory and variants. In Twenty-Ninth ACM Symposium on Principles of Programming Languages, Jan. 2002.
10. G. Kiczales, E. Hilsdale, J. Hugunin, M. Kersten, J. Palm, and W. Griswold. An overview of AspectJ. In European Conference on Object-oriented Programming. Springer-Verlag, 2001.
11. M. Kim, M. Viswanathan, H. Ben-Abdallah, S. Kannan, I. Lee, and O. Sokolsky. Formally specified monitoring of temporal properties. In European Conference on Real-time Systems, York, UK, June 1999.
12. I. Lee, S. Kannan, M. Kim, O. Sokolsky, and M. Viswanathan. Run-time assurance based on formal specifications. In International Conference on Parallel and Distributed Processing Techniques and Applications, Las Vegas, NV, June 1999.
13. J. Ligatti, L. Bauer, and D. Walker. Edit automata: Enforcement mechanisms for run-time security policies. International Journal of Information Security, 4(1-2):2-16, Feb. 2005.
14. T. Lindholm and F. Yellin. The Java Virtual Machine Specification. Addison-Wesley, 2nd edition, 1999.
15. E. Meijer and J. Gough. A technical overview of the Common Language Infrastructure, http://research.microsoft.com/~emeijer/Papers/CLR.pdf.
16. A. Petersen. Pooka: A Java email client, 2003. http://www.suberic.net/pooka/.
17. J. H. Saltzer and M. D. Schroeder. The protection of information in computer systems. In IEEE 63, 9, pages 1278-1308, Sept. 1975.
18. F. B. Schneider. Enforceable security policies. ACM Transactions on Information and Systems Security, 3(1):30-50, Feb. 2000.
19. D. B. Tucker and S. Krishnamurthi. Pointcuts and advice in higher-order languages. In Proceedings of the 2nd International Conference on Aspect-Oriented Software Development, pages 158-167, 2003.
20. D. Walker, S. Zdancewic, and J. Ligatti. A theory of aspects. In ACM International Conference on Functional Programming, Uppsala, Sweden, Aug. 2003.