A static type system for JVM access control

ACM Transactions on Programming Languages and Systems

Volumn 29, Issue 1, 2007, Pages

  Higuchi, Tomoyuki ^a,b   Ohori, Atsushi ^a,c  

^a JAPAN ADVANCED INSTITUTE OF SCIENCE AND TECHNOLOGY   (Japan)

^b Insite Corporation   (Japan)

^c TOHOKU UNIVERSITY   (Japan)

Author keywords

Access control; JVM; Stack inspection; Type inference; Type system

Indexed keywords

ACCESS CONTROL; JVM; STACK INSPECTION; TYPE INFERENCE;

ALGORITHMS; CONTROL SYSTEMS; PUBLIC POLICY; SOFTWARE ENGINEERING; VIRTUAL REALITY;

JAVA PROGRAMMING LANGUAGE;

EID: 33846636279     PISSN: 01640925     EISSN: 15584593     Source Type: Journal    
DOI: 10.1145/1180475.1180479     Document Type: Article

References (30)

1. BANERJEE, A. AND NAUMANN, D. 2001. A simple semantics and static analysis for Java security. CS Rep. AI-068-85, Stevens Institute of Technology.
2. BANERJEE, A. AND NAUMANN, D. 2002. Representation independence, confinement, and access control. In Proceedings of the Symposium on Principles of Programming Languages. 166-177.
3. BARTHE, G. AND DUFAY, G. 2004. Certified bytecode verification. In Proceedings of the International Conference on Fundamental Approaches to Software Engineering. Lecture Notes in Computer Science, vol. 2984. Springer Verlag, Berlin. 99-113.
4. CARTWRIGHT, R. AND FAGAN, M. 1991. Soft typing. In Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation. 278-292.
5. CLEMENTS, J. AND FELLEISEN, M. 2003. A tail-recursive semantics for stack inspections. In European Symposium on Programming. Lecture Notes in Computer Science, vol. 2618. Springer Verlag, Berlin. 22-37.
6. ERLINGSSON, U. AND SHNEIDER, F. 2000. RM enforcement of Java stack inspection. In Proceedings of the IEEE Symposium on Security and Privacy. 246-255.
7. FOURNET, C. AND GORDON, A. 2002. Stack inspection: Theory and variants. In Proceedings of the Symposium on Principles of Programming Languages. 307-318.
8. FREUND, S. AND MITCHELL, J. 1999. The type system for object initialization in the Java bytecode language. ACM Trans. Program. Lang. Syst. 21, 6, 1196-1250.
9. FREUND, S. AND MITCHELL, J. 2003. A type system for the Java bytecode language and verifier. J. Autom. Reasoning 30, 3-4, 271-321.
10. GALLIER, J. AND SNYDER, W. 1989. Complete sets of transformations for general E-Unification. Theor. Comput. Sci. 67, 2, 203-260.
11. GONG, L. 1999. Inside Java™ 2 Platform Security. Addison-Wesley, Reading, MA.
12. GONG, L. AND SCHEMERS, R. 1998. Implementing protection domains in the Java development kit 1.2. In Internet Society Symposium on Network and Distributed System Security. 125-134.
13. HIGUCHI, T. AND OHORI, A. 2002. Java bytecode as a typed term calculus. In Proceedings of the International Conference on Principles and Practice of Declarative Programming. 201-211.
14. KARJOTH, G. 2000. An operational semantics of Java 2 access control. In IEEE Computer Security Foundations Workshop. 224-232.
15. KLEIN, C. AND WILDMOSER, M. 2003. Verified bytecode subroutines. J. Autom. Reasoning 30, 3-4, 363-398.
16. KOVED, L., PISTOIA, M., AND KERSHENBAUM, A. 2002. Access rights analysis for Java. In Proceedings of the Conference on Object-Oriented Programming Systems, Languages and Applications. 359-372.
17. LEROY, X. 1992. Polymorphic typing of an algorithmic language. Ph.D. thesis, University of Paris VII.
18. LEROY, X. 2003. Java bytecode verification: Algorithms and formalizations. J. Autom. Reasoning 30, 3-4, 235-269.
19. LIANG, S. AND BRACHA, G. 1998. Dynamic class loading in the Java virtual machine. In Proceedings of the ACM Conference on Object-Oriented Programming Systems, Languages and Applications. 36-44.
20. LINDHOLM, T. AND YELLIN, F. 1999. The Java Virtual Machine Specification, 2nd Ed. Addison Wesley, Reading, MA.
21. NIPKOW, T. 2003. Java bytecode verification, editorial introduction to the special issue. J. Autom. Reasoning 30, 3-4, 233-233.
22. OHORI, A. 1999. The logical abstract machine: A Curry-Howard isomorphism for machine code. In Proceedings of International Symposium on Functional and Logic Programming. Lecture Notes in Computer Science, vol. 1722. Springer Verlag, Berlin. 300-318.
23. POSEGGA, J. AND VOGT, H. 1998. Byte code verification for Java smart card based on model checking. In Proceedings of the European Symposium on Research in Computer Security. Lecture Notes in Computer Science, vol. 1485. Springer Verlag, Berlin. 175-190.
24. PUTTIER, F., SKALKA, C., AND SMITH, S. 2005. A systematic approach to static access control. ACM Trans. Program. Lang. Syst. 27, 2, 344-382.
25. SKALKA, C. 2005. Trace effects and object orientation. In Proceedings of the ACM Conference on Principles and Practice of Declarative Programming. 139-150.
26. SKALKA, C. AND SMITH, S. 2004. History effects and verification. In Proceedings of the Asian Symposium on Programming Languages and Systems. Lecture Notes in Computer Science. Springer Verlag, Berlin. 107-128.
27. SKALKA, S. AND SMITH, S. 2000. Static enforcement of security with types. In Proceedings of the International Conference on Functional Programming. 34-45.
28. STATA, R. AND ABADI, M. 1998. A type system for Java bytecode subroutines. In Proceedings of the Symposium on Principles of Programming Languages. 149-160.
29. WALLACH, D. 1998. Understanding Java stack inspection. In Proceedings of the IEEE Symposium on Security and Privacy. 52-63.
30. WALLACH, D., APPEL, A., AND FELTEN, E. 2000. Safkasi: A security mechanism for language-based systems. ACM Trans. Softw. Eng. Methodol. 9, 341-378.