Combining type-based analysis and model checking for finding counterexamples against non-interference

PLAS 2006 - Proceedings of the 2006 Programming Languages and Analysis for Security Workshop

Volumn 2006, Issue , 2006, Pages 17-26

  Unno, Hiroshi ^a   Kobayashi, Naoki ^b   Yonezawa, Akinori ^a  

^a UNIVERSITY OF TOKYO   (Japan)

^b TOHOKU UNIVERSITY   (Japan)

Author keywords

Model checking; Non interference; Type system

Indexed keywords

ACCIDENT PREVENTION; DATA PROCESSING; INFORMATION ANALYSIS; MATHEMATICAL MODELS;

MODEL CHECKING; NON-INTERFERENCE; TYPE SYSTEM;

COMPUTER PROGRAMMING LANGUAGES;

EID: 33745935759     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1134744.1134750     Document Type: Conference Paper

References (21)

1. G. Barthe, P. R. D'Argenio, and T. Rezk. Secure information flow by self-composition. In CSFW '04: Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW04), pages 100-114, Washington, DC, USA. 2004. IEEE Computer Society.
2. J. Condit, M. Harren, S. McPeak, G. C. Necula, and W. Weimer. CCured in the real world. In PLD1 '03: Proceedings of the ACM SIGPLAN 2003 conference on Programming language design and implementation, pages 232-244, New York, NY, USA, 2003. ACM Press.
3. J. A. Goguen and J. Meseguer. Security policies and security models. In IEEE Symposium on Security and Privacy, pages 11-20, 1982.
4. N. Heintze and J. G. Riecke. The SLam calculus: programming with secrecy and integrity. In POPL '98: Proceedings of the 25th ACM SIGPLAN-SIG ACT symposium on Principles of programming languages, pages 365-377. New York, NY, USA, 1998. ACM Press.
5. T. A. Henzinger, R. Jhala, R. Majumdar, and G. Sutre. Lazy abstraction. In POPL '02: Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 58-70, New York, NY, USA, 2002. ACM Press.
6. K. Honda and N. Yoshida. A uniform type structure for secure information flow. In POPL '02: Proceedings of the 29th ACM SIGPIAN-SIGACT symposium on Principles of programming languages, pages 81-92, New York, NY, USA, 2002. ACM Press.
7. N. Kobayashi. Type-based information flow analysis for the picalculus. Acta Informatica, 42(4-5):291-347, 2005.
8. P. Li and S. Zdancewic. Practical information flow control in web-based information systems. In CSFW '05: Proceedings of the 18th IEEE Computer Security Foundations Workshop (CSFW'05), pages 2-15, June 2005, 20-22.
9. A. C. Myers. JFlow: practical mostly-static information flow control. In POPL '99: Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 228-241, New York, NY, USA, 1999. ACM Press.
10. A. C. Myers, N. Nystrom, L. Zheng, and S. Zdancewic. Jif: Java information flow. http.//www.cs.cornell.edu/jif, July 2001.
11. G. C. Necula, S. McPeak, S. P. Rahul, and W. Weimer. CIL: Intermediate language and tools for analysis and transformation of C programs. In CC '02: Proceedings of the 11th International Conference on Compiler Construction, pages 213-228, London, UK, 2002. Springer-Verlag.
12. G. C. Necula, S. McPeak, and W. Weimer. CCured: type-safe retrofitting of legacy code. In POPL '02: Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 128-139, New York, NY, USA, 2002. ACM Press.
13. Y. Oiwa, S. Tatsurou, S. Eijiro, and Y. Akinori. Fail-safe ANSI-C compiler: An approach to making C programs secure: Progress report. In In International Symposium on Software Security, number 2609 in LNCS, pages 133-153. Springer-Verlag, 2002.
14. F. Pettier and S. Conchon. Information flow inference for free. In ICFP W: Proceedings of the fifth ACM SIGPLAN international conference on Functional programming, pages 46-57, New York, NY, USA, 2000. ACM Press.
15. F. Pottier and V. Simonet. Information flow inference for ML. In POPL '02: Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 319-330, New York, NY, USA, 2002. ACM Press.
16. V. Simonet. Flow Caml in a nutshell. In G. Hutton, editor, Proceedings of the first APPSEM-II workshop, pages 152-165, Nottingham, United Kingdom, March 2003.
17. G. Smith and D. Volpano. Secure information flow in a multi-threaded imperative language. In POPL '98: Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 355-364, New York, NY, USA, 1998. ACM Press.
18. T. Terauchi and A. Aiken. Secure information flow as a safety problem. In In Proceedings of the 12th International Static Analysis Symposium, September 2005.
19. H. Unno, N. Kobayashi, and A. Yonezawa. Combining type-based analysis and model checking for finding counterexamples against non-interference (Full version), February 2006. Available from http://web.yl.is.s.u-tokyo.ac.jp/~uhiro/ .
20. D. M. Volpano, C. Irvine, and G. Smith. A sound type system for secure flow analysis. Journal of Computer Security, 4(2-3): 167-187, 1996.
21. D. M. Volpano and G. Smith. A type-based approach to program security. In TAPSOFT '97: Proceedings of the 7th International Joint Conference CAAP/FASE on Theory and Practice of Software Development, pages 607-621, London, UK, 1997. Springer-Verlag.