Secure implementations for typed session abstractions

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 2007, Pages 170-186

  Corin, Ricardo ^a,b,c   Deniélou, Pierre Malo ^a,b   Fournet, Cédric ^a,b   Bhargavan, Karthikeyan ^a,b   Leifer, James ^a  

^a MSR INRIA Joint Centre   (France)

^b MICROSOFT RESEARCH   (United States)

^c UNIVERSITY OF TWENTE   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

LANGUAGE-BASED SUPPORT; LOW-LEVEL CODING; WELL-TYPED PROGRAMS;

COMPUTER PROGRAMMING; CRYPTOGRAPHY; MESSAGE PASSING; NETWORK PROTOCOLS;

ABSTRACTING;

EID: 35048820042     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2007.29     Document Type: Conference Paper

References (32)

1. M. Abadi, C. Fournet, and G. Gonthier. Secure implementation of channel abstractions. Information and Computation, 174(1):37-83, Apr. 2002.
2. P. Adão and C. Fournet. Cryptographically sound implementations for communicating processes (extended abstract). In M. B. et al., editor, 33rd International Colloquium on Automata, Languages and Programming (ICALP), Part II, volume 4052 of LNCS, pages 83-94. Springer, July 2006.
3. K. Bhargavan, R. Corin, C. Fournet, and A. D. Gordon. Secure sessions for web services. In ACM Workshop on Secure Web Services (SWS), pages 11-22, Oct. 2004.
4. K. Bhargavan, C. Fournet, A. D. Gordon, and S. Tse. Verified interoperable implementations of security protocols. In 19th IEEE Computer Security Foundations Workshop, (CSFW), pages 139-152, July 2006.
5. J. Billings, P. Sewell, M. Shinwell, and R. Strniša. Type-Safe Distributed Programming for OCaml. In ACM SIGPLAN Workshop on ML, Sept. 2006.
6. E. Bonelli, A. Compagnoni, and E. Gunter. Correspondence assertions for process synchronization in concurrent communications. In A. Brogi, editor, 1st International Workshop on Foundations of Coordination Languages and Software Architectures (FOCLASA), volume 97 of ENTCS, pages 175-195. Elsevier Science, 2004.
7. M. Carbone, K. Honda, and N. Yoshida. Structured communication-centred programming for web services. In C. Harikin, editor, Programming Languages and Systems, 16th European Symposium on Programming (ESOP), LNCS. Springer, 2007.
8. S. Carpineti and C. Laneve. A basic contract language for web services. In P. Sestoft, editor, Programming Languages and Systems, 15th European Symposium on Programming (ESOP), volume 3924 of LNCS, pages 197-213. Springer, 2006.
9. S. Chaki, S. K. Rajamani, and J. Rehof. Types as models: model checking message-passing programs. In 29th ACM SIGPLAN-SIGACT symposium on Principles of Programming Languages (POPL), pages 45-57, Jan. 2002.
10. R. Corin, P-M. Dénielou, C. Fournet, K. Bhargavan, and J. Leifer. Secure implementations for typed session abstractions. At http://www.msr-inria. inria.fr/ projects/sec/sessions/, 2007.
11. V. Cortier, B. Warinschi, and E. Zalinescu. How to protect security protocols against active attackers. Unpublished draft. [12] P.-M. Deniélou and J. J. Leifer. Abstraction preservation and subtyping in distributed languages. In 11th International Conference on Functional Programming (ICFP), 2006.
12. M. Dezani-Ciancaglini, D. Mostrous, N. Yoshida, and S. Drossopoulou. Session types for object-oriented languages. In 20th European Conference for Object-Oriented Languages, July 2006.
13. D. Dolev and A.C. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, 29(2):198-208, 1983.
14. D. Duggan. Cryptographic types. In 15th IEEE Computer Security Foundations Workshop (CSFW), 2002.
15. M. Fahndrich, M. Aiken, C. Hawblitzel, G. H. Orion Hodson, J. R. Larus, and S. Levi. Language support for fast and reliable message-based communication in Singularity OS. In EUROSYS, 2006.
16. S. J. Gay and M. Hole. Types and subtypes for client-server interactions. In Programming Languages and Systems, 8th European Symposium on Programming (ESOP), pages 74-90, 1999.
17. S. Goldwasser, S. Micali, and R. Rivest. A digital signature scheme secure against adaptive chosen-message attack. SIAM Journal on Computing, 17(2):281-308, 1988.
18. A. D. Gordon and A. Jeffrey. Authenticity by typing for security protocols. Journal of Computer Security, 11(4):451-521, 2003.
19. K. Honda, V. T. Vasconcelos, and M. Kubo. Language primitives and type disciplines for structured communication-based programming. In Programming Languages and Systems, 7th European Symposium on Programming (ESOP), volume 1381 of LNCS, pages 22-138. Springer, 1998.
20. A. Igarashi and N. Kobayashi. A generic type system for the pi-calculus. In 28th ACM SIGPLAN-SIGACTsymposium on Principles of programming languages (POPL), pages 128-141, 2001.
21. D. Malkhi, N. Nisan, B. Pinkas, and Y. Sella. Fairplay - secure two-party computation system. In USENIX Security Symposium, pages 287-302. USENIX, 2004.
22. R. Milner, M. Tofte, and R. Harper. The Definition of Standard ML. MIT Press, 1990.
23. Objective Caml. At http://caml.inria.fr.
24. A. Perrig and D. Song. Looking for diamonds in the desert - extending automatic protocol generation to three-party authentication and key agreement protocols. In 13th IEEE Computer Security Foundations Workshop (CSFW), pages 64-76, 2000.
25. P. Sewell, J. J. Leifer, K. Wansbrough, F. Zappa Nardelli, M. Allen-Williams, P. Habouzit, and V. Vafeiadis. Acute: High-level programming language design for distributed computation. In 10th International Conference on Functional Programming (ICFP), Sept. 2005.
26. D. X. Song, S. Berezin, and A. Perrig. Athena: A novel approach to efficient automatic security protocol analysis. Journal of Computer Security, 9(1/2):47-74, 2001.
27. D. Syme. F#, 2005. At http://research.microsoft.com/fsharp/.
28. A. Vallecillo, V. T. Vasconcelos, and A. Ravara. Typing the behavior of objects and components using session types. In 1st International Workshop on Foundations of Coordination Languages and Software Architectures (FOCLASA), volume 68 of ENTCS. Elsevier Science, 2003.
29. V T. Vasconcelos, S. Gay, and A. Ravara. Typechecking a multithreaded functional language with session types. TCS, 368(1-2):64-87, 2006.
30. T. Y. C. Woo and S. S. Lam. A semantic model for authentication protocols. In IEEE Symposium on Security and Privacy (S&P), page 178, 1993.
31. N. Yoshida and V. T. Vasconcelos. Language primitives and type discipline for structured communication-based programming revisited: Two systems for higher-order session communication. In 1st International Workshop on Security and Rewriting Techniques, ENTCS, 2006.
32. L. Zheng, S. Chong, A. C. Myers, and S. Zdancewic. Using replication and partitioning to build secure distributed systems. In IEEE Symposium on Security and Privacy (S&P), pages 236-250, 2003.