Eliminating implicit information leaks by transformational typing and unification

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3866 LNCS, Issue , 2006, Pages 47-62

  Köpf, Boris ^a   Mantel, Heiko ^b  

^a ETH ZURICH   (Switzerland)

^b RWTH AACHEN UNIVERSITY   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL METHODS; COMPUTER PROGRAMMING; INFORMATION DISSEMINATION; INTEGRATION; PROBLEM SOLVING; PROFESSIONAL ASPECTS; SECURITY SYSTEMS;

INFORMATION LEAKS; SECURITY ANALYSIS; TRANSFORMATIONAL TYPING; UNIFICATION;

SECURITY OF DATA;

EID: 33745678531     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11679219_5     Document Type: Conference Paper

References (19)

1. [Aga00] J. Agat. Transforming out Timing Leaks. In Proceedings of the 27th ACM Symposium on Principles of Programming Languages, pages 40-53, 2000.
2. [BC02] G. Boudol and I. Castellani. Noninterference for Concurrent Programs and Thread Systems. Theoretical Computer Science, 281:109-130, 2002.
3. [BN02] A. Banerjee and D. A. Naumann. Secure Information Flow and Pointer Confinement in a Java-like Language. In Proceedings of the 15th IEEE Computer Security Foundations Workshop, pages 253-270, Cape Breton, Nova Scotia, Canada, 2002.
4. [BS01] F. Baader and W. Snyder. Unification theory. In A. Robinson and A. Voronkov, editors, Handbook of Automated Reasoning, volume I, chapter 8, pages 445-532. Elsevier Science, 2001.
5. [HR98] N. Heintze and J. G. Riecke. The SLam Calculus: Programming with Secrecy and Integrity. In Proceedings of the 25th ACM Symposium on Principles of Programming Languages, pages 365-377, 1998.
6. [HS87] A. Herold and J. Siekmann. Unification in Abelian Semigroups. Journal of Automated Reasoning, 3:247-283, 1987.
7. [HY02] K. Honda and N. Yoshida. A uniform type structure for secure information flow. In Proceedings of the 29th ACM Symposium on Principles of Programming Languages, pages 81-92. ACM Press, 2002.
8. [KM05] Boris Köpf and Heiko Mantel. Eliminating Implicit Information Leaks by Transformational Typing and Unification. Technical Report 498, ETH Zürich, 2005.
9. [MS04] Heiko Mantel and David Sands. Controlled Declassification based on Intransitive Noninterference. In Proceedings of the 2nd ASIAN Symposium on Programming Languages and Systems, APLAS 2004, LNCS 3303, pages 129-145, Taipei, Taiwan, November 4-6 2004. Springer-Verlag.
10. [Mye99] A. Myers. JFlow: Practical mostly-static information flow control. In Symposium on Principles of Programming Languages, pages 228-241, 1999.
11. [Sab01] A. Sabelfeld. The Impact of Synchronisation on Secure Information Flow in Concurrent Programs. In Proceedings of Andrei Ershov 4th International Conference on Perspectives of System Informatics, volume 2244 of LNCS, pages 225-239, 2001.
12. [SM02] A. Sabelfeld and H. Mantel. Static Confidentiality Enforcement for Distributed Programs. In Proceedings of the 9th International Static Analysis Symposium, SAS'02, volume 2477 of LNCS, pages 376-394, Madrid, Spain, 2002.
13. [SM03] A. Sabelfeld and A. C. Myers. Language-based Information-Flow Security. IEEE Journal on Selected Areas in Communication, 21(1):5-19, 2003.
14. [SS99] A. Sabelfeld and D. Sands. A Per Model of Secure Information Flow in Sequential Programs. In Proceedings of the 8th European Symposium on Programming, LNCS, pages 50-59, 1999.
15. [SSOO] A. Sabelfeld and D. Sands. Probabilistic Noninterference for Multi-threaded Programs. In Proceedings of the 13th IEEE Computer Security Foundations Workshop, pages 200-215, Cambridge, UK, 2000.
16. [SV98] G. Smith and D. Volpano. Secure Information Flow in a Multi-Threaded Imperative Language. In 25th ACM Symposium on Principles of Programming Languages, San Diego, California, pages 355-364, 1998.
17. [VS97] D. Volpano and G. Smith. A Type-Based Approach to Program Security. In TAPSOFT 97, volume 1214 of LNCS, pages 607-621, 1997.
18. [VS98] D. Volpano and G. Smith. Probabilistic Noninterference in a Concurrent Language. In Proceedings of the 11th IEEE Computer Security Foundations Workshop, pages 34-43, Rockport, Massachusetts, 1998.
19. [ZM03] S. Zdancewic and A. Myers. Observational determinism for concurrent program security. In Proceedings of the 16th IEEE Computer Security Foundations Workshop, 2003, pages 29-47. IEEE Computer Society, 2003.