Assessing security threats of looping constructs

Conference Record of the Annual ACM Symposium on Principles of Programming Languages

Volumn , Issue , 2007, Pages 225-235

  Malacaria, Pasquale ^a  

^a QUEEN MARY UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

Information theory; Language semantics; Security

Indexed keywords

COMPUTER PROGRAMMING LANGUAGES; INFORMATION DISSEMINATION; INFORMATION THEORY; SEMANTICS;

LANGUAGE SEMANTICS; SECURITY THREATS;

SECURITY OF DATA;

EID: 34548282543     PISSN: 07308566     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1190216.1190251     Document Type: Conference Paper

References (27)

1. D.Bell and L. LaPadula, "Secure computer systems: Unified exposition and Multics interpretation", Technical Report MTR-2997, MITRE Corp, 1997.
2. D. Clark and S. Hunt and P. Malacaria "Quantitative Analysis of the Leakage of Confidential Data" Electronic Notes in Theoretical Computer Science volume 59, issue 3, Elsevier, 2002
3. D. Clark and S. Hunt and P. Malacaria, "Quantified Interference for a While Language", Elsevier, Electronic Notes in Theoretical Computer Science 112, pages 149 - 166, 2005.
4. D. Clark and S. Hunt and P. Malacaria, "Quantitative Information Flow, Relations and Polymorphic Types", Journal of Logic and Computation, Special Issue on Lambda-calculus, type theory and natural language, 2005, volume 18, number 2, pages 181-199
5. M. R. Clarkson and A. C. Myers and F. B. Schneider, "Belief in Information Flow", Proc. 18th IEEE Computer Security Foundations Workshop (CSFW 18), IEEE Computer Society Press, 2005.
6. T. M. Cover and J. A. Thomas, "Elements of Information Theory", 1991, Wiley Interscience.
7. D. E. R. Denning, "A Lattice Model of Secure Information. Flow", Communications of the ACM, volume 19, number 5, May 1976.
8. D. E. R. Denning, "Cryptography and Data Security", 1982, Addison-Wesley.
9. A. Di Pierro and C. Hankin and H. Wiklicky, "Probabilistic confinement in a declarative framework", Electronic Notes in Theoretical Computer Science, volume 48, Elsevier 2001.
10. A. Di Pierro and C. Hankin and H. Wiklicky, "Quantitative static analysis of distributed systems", Journal of Functional Programming,2005.
11. J. Goguen and J. Meseguer, "Security Policies and Security Models", IEEE Symposium on Security and Privacy, pages 11-20, IEEE Computer Society Press, 1982.
12. J. W. Gray III and P. F. Syverson, "A Logical Approach to Multilevel Security of Probabilistic Systems", Distributed Computing, volume 11, number 2, 1998, pages 73-90.
13. W. Gray, III, James, 'Toward a Mathematical Foundation for Information Flow Security", Proc. 1991 IEEE Symposium on Security and Privacy, Oakland, CA, Mayl991, pages 21-34.
14. S. Isthiaq and P.W. O'Hearn, "BI as an assertion language for mutable data structures", pages = "14-26", 28th POPL London 2001.
15. G. Lowe, "Quantifying Information Flow", Proceedings of the Workshop on Automated Verification of Critical Systems, 2001.
16. D.Malone and W. Sullivan, "Guesswork and entropy", IEEE Transactions on Information Theory, volume 50, number 3, March 2004.
17. J. L. Massey, '"Guessing and entropy", Proc. IEEE International Symposium on Information Theory, 1994, Trondheim, Norway.
18. J. McLean, "Security models and information flow", Proceedings of the 1990 IEEE Symposium on Security and Privacy, 1990, Oakland, California.
19. J. Milien, "Covert channel capacity", Proc. 1987 IEEE Symposium on Research in Security and Privacy, IEEE Computer Society Press, 1987.
20. J. C. Reynolds, "Syntactic control of interference", Conf. Record 5th ACM Symp. on Principles of Programming Languages 1978.
21. J. Reynolds, "Separation logic: a logic for shared mutable data structures", Invited Paper, LICS'02, 2002.
22. P. Y. A. Ryan and J. McLean and J. Millen and V. Gilgor, "Noninterference, who needs it?", Proceedings of the 14th IEEE Security Foundations Workshop, Cape Breton, Nova Scotia, Canada, June 2001,
23. C. Shannon, "A mathematical theory of communication", The Bell System Technical Journal, volume 27, July and October, 1948, pages 379-423 and 623-656.
24. D. Volpano and G. Smith, "A Type-Based Approach to Program. Security", Proceedings of TAPSOFT '97 (Colloquium on Formal Approaches in Software Engineering), April 1997, Lecture Notes in Computer Science, number 1214, pages 607-621.
25. D. G. Weber, "Quantitative Hookup security for covert channel analysis", Proceedings of the 1988 Workshop on the Foundations of Computer Security, 1988, Fanconia, New Hampshire, U.S.A..
26. G. Winskel, "The formal semantics of programming languages: an introduction", MIT Press 1993.
27. T. Wittbold, "Network of Covert Channels", Proceedings of the 1990 Workshop on the Foundations of Computer Security, 1990.