A cryptographic decentralized label model

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2007, Pages 192-206

  Vaughan, Jeffrey A ^a   Zdancewic, Steve ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNICATION CHANNELS (INFORMATION THEORY); DATA TRANSFER; INFORMATION SYSTEMS; MATHEMATICAL MODELS; OBJECT ORIENTED PROGRAMMING; SECURITY OF DATA;

INTEGRITY POLICIES; INTEGRITY REQUIREMENTS; SECURITY LABELS;

CRYPTOGRAPHY;

EID: 34548790762     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2007.5     Document Type: Conference Paper

References (35)

1. M. Abadi. Access control in a core calculus of dependency. In ICFP '06: Proceedings of the eleventh ACM SIGPLAN international conference on Functional Programming, pages 263-273, Portland, Oregon, USA, September 2006.
2. M. Abadi, L. Cardelli, B. Pierce, and D. Rémy. Dynamic typing in polymorphic languages. Journal of Functional Programming, 5(1): 111-130, January 1995.
3. M. Abadi and P. Rogaway. Reconciling two views of cryptography (the computational soundness of formal encryption). Journal of Cryptology, 15(2): 103-127, 2002.
4. A. Askarov, D. Hedin, and A. Sabelfeld. Cryptographically masked information flows. In Proceedings of the International Static Analysis Symposium, LNCS, Seoul, Korea, August 2006.
5. A. Askarov and A. Sabelfeld. Security-typed languages for implementation of cryptographic protocols: A case study. In Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS), Milan, Italy, September 2005.
6. M. Backes and B. Pfitzmann. Relating symbolic and cryptographic secrecy. IEEE Trans. Dependable Secur. Comput., 2(2):109-123, 2005.
7. M. Backes, B. Pfitzmann, and M. Waidner. A composable cryptographic library with nested operations. In CCS '03: Proceedings of the 10th ACM conference on Computer and communications security, pages 220-230, Washington D.C., USA, 2003. ACM Press.
8. D. E. Bell and L. J. LaPadula. Secure computer system: Unified exposition and Multics interpretation. Technical Report ESD-TR-75-306, MITRE Corp. MTR-2997, Bedford, MA, 1975. Available as NTIS AD-A023 588.
9. R. Chapman. Industrial experience with spark. Ada Lett., XX(4):64-68, 2000.
10. S. Chong and A. C. Myers. Decentralized robustness. In Proceedings of the 19th IEEE Computer Security Foundations Workshop (CSFW'06), pages 242-253, Los Alamitos, CA, USA, July 2006.
11. S. Chong, A. C. Myers, K. Vikram, and L. Zheng. Jif Reference Manual, June 2006. Available from http://www.cs.cornell.edu/jif.
12. T. Chothia, D. Duggan, and J. Vitek. Type based distributed access control. In Proceedings of the 16th IEEE Computer Security Foundations Workshop (CSFW'03), Asilomar, Ca., USA, July 2003.
13. D. E. Denning. Secure Information Flow in Computer Systems. PhD thesis, Purdue University, W. Lafayette, Indiana, USA, May 1975.
14. D. E. Denning and P. J. Denning. Certification of Programs for Secure Information Flow. Comm. of the ACM, 20(7):504-513, July 1977.
15. Y. G. Desmedt and Y. Frankel. Threshold cryptosystems. In CRYPTO '89: Proceedings on Advances in cryptology, pages 307-315, New York, NY, USA, 1989. Springer-Verlag New York, Inc.
16. D. Dolev and A. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, 2(29), 1983.
17. D. Duggan. Cryptographic types. In CSFW '02: Proceedings of the 15th IEEE Computer Security Foundations Workshop (CSFW'02), page 238, Washington, DC, USA, 2002. IEEE Computer Society.
18. J. A. Goguen and J. Meseguer. Security policies and security models. In Proc. IEEE Symposium on Security and Privacy, pages 11-20. IEEE Computer Society Press, Apr. 1982.
19. N. Heintze and J. G. Riecke. The SLam calculus: programming with secrecy and integrity. In POPL '98: Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 365-377, New York, NY, USA, 1998. ACM Press.
20. B. Hicks, K. Ahmadizadeh, and P. McDaniel. Understanding practical application development in security-typed languages. In 22st Annual Computer Security Applications Conference (ACSAC), Miami, Fl, December 2006.
21. P. Laud and V. Vene. A type system for computationally secure information flow. In Proceedings of the 15th International Symposium on Fundamentals of Computational Theory, volume 3623, pages 365-377, Lübeck, Germany, 2005.
22. A. C. Myers and B. Liskov. Protecting privacy using the decentralized label model. ACM Transactions on Software Engineering and Methodology, 9(4):410-442, 2000.
23. A. C. Myers, A. Sabelfeld, and S. Zdancewic. Enforcing robust declassification and qualified robustness. Journal of Computer Security, 2006. To appear.
24. B. C. Pierce. Types and Programming Languages. MIT Press, Cambridge, Massachusetts, 2002.
25. F. Pottier and V. Simonet. Information flow inference for ML. In Proc. 29th ACM Symp. on Principles of Programming Languages (POPL), pages 319 - 330, Portland, Oregon, Jan. 2002.
26. D. K. Rappe. Homomorphic Cryptosystems and Their Applications. PhD thesis, University of Dortmund, Germany, 2004.
27. A. Sabelfeld and A. C. Myers. Language-based informationflow security. IEEE Journal on Selected Areas in Communications, 21(1):5-19, Jan. 2003.
28. Security-enhanced Linux. Project website http://www.nsa.gov/selinux/ accessed November, 2006.
29. V. Simonet. Flow Caml in a nutshell. In G. Hutton, editor, Proceedings of the first APPSEM-II workshop, pages 152-165, Mar. 2003.
30. G. Smith and R. Alpizar. Secure information flow with random assignment and encryption. In Proceedings of The 4th ACM Workshop on Formal Methods in Security Engineering: From Specifications to Code (FSME'06), pages 33-43, Alexandria, Virgina, USA, November 2006.
31. E. Sumii and B. C. Pierce. A bisimulation for dynamic sealing. In Principals of Programming Languages, Venice, Italy, January 2004.
32. S. Tse and S. Zdancewic. Run-time principals in information-flow type systems. In IEEE Symposium on Security and Privacy, 2004.
33. D. Volpano, G. Smith, and C. Irvine. A sound type system for secure flow analysis. Journal of Computer Security, 4(3):167-187, 1996.
34. G. Winskel. The Formal Semantics of Programming Languages: An Introduction. MIT Press, Cambridge, Massachusetts, 1993.
35. L. Zheng, S. Chong, S. Zdancewic, and A. C. Myers. Building Secure Distributed Systems Using Replication and Partitioning. In IEEE 2003 Symposium on Security and Privacy. IEEE Computer Society Press, 2003.