A library for secure multi-threaded information flow in haskell

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 2007, Pages 187-200

  Tsai, Ta Chung ^a   Russo, Alejandro ^a   Hughes, John ^a  

^a CHALMERS UNIVERSITY OF TECHNOLOGY   (Sweden)

Author keywords

[No Author keywords available]

Indexed keywords

CONCURRENCY CONTROL; INFORMATION ANALYSIS; ONLINE SYSTEMS; SECURITY OF DATA;

ARROW COMBINATORS; INFORMATION-FLOW SECURITY; MULTITHREADING;

DIGITAL LIBRARIES;

EID: 35048824886     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2007.6     Document Type: Conference Paper

References (37)

1. J. Agat. Transforming out timing leaks. In Proc. ACM Symp. on Principles of Programming Languages, pages 40-53, Jan. 2000.
2. G. Boudol and I. Castellani. Noninterference for concurrent programs. In Proc. ICALP'01, volume 2076 of LNCS, pages 382-395. Springer-Verlag, July 2001.
3. G. Boudol and I. Castellani. Non-interference for concurrent programs and thread systems. Theoretical Computer Science, 281(1):109-130, June 2002.
4. R. Focardi and R. Gorrieri. Classification of security properties (part I: Information flow). In R. Focardi and R. Gorrieri, editors, Foundations of Security Analysis and Design, volume 2171 of LNCS, pages 331-396. Springer-Verlag, 2001.
5. T. Harris, M. Herlihy, S. Marlow, and S. P. Jones. Composable memory transactions. In Proc. ACM Symp. on Principles and Practice of Parallel Programming, to appear, June 2005.
6. K. Honda, V. Vasconcelos, and N. Yoshida. Secure information flow as typed process behaviour. In Proc. European Symp. on Programming, volume 1782 of LNCS, pages 180-199. Springer-Verlag, 2000.
7. K. Honda and N. Yoshida. A uniform type structure for secure information flow. In Proc. ACM Symp. on Principles of Programming Languages, pages 81-92, Jan. 2002.
8. J. Hughes. Generalising monads to arrows. Science of Computer Programming, 37(1-3):67-111, 2000.
9. M. Huisman, P. Worah, and K. Sunesen. A temporal logic characterisation of observational determinism. In Proc. IEEE Computer Security Foundations Workshop, July 2006.
10. S. Hunt. Pers generalise projections for strictness analysis (extended abstract). In Proc. 1990 Glasgow Workshop on Functional Programming, Workshops in Computing, Ullapool, 1991. Springer-Verlag.
11. B. Köpf and H. Mantel. Eliminating implicit information leaks by transformational typing and unification. In FAST'05, volume 3866 of LNCS. Springer-Verlag, July 2006.
12. P. Li and S. Zdancewic. Encoding information flow in haskell. In CSFW '06: Proceedings of the 19th IEEE Workshop on Computer Security Foundations. IEEE Computer Society, 2006.
13. A. C. Myers. JFlow: Practical mostly-static information flow control. In Proc. ACM Symp. on Principles of Programming Languages, pages 228-241, Jan. 1999.
14. A. C. Myers, L. Zheng, S. Zdancewic, S. Chong, and N. Nystrom. Jif: Java information flow. Software release. http://www.cs.cornell.edu/jif, July 2001-2006.
15. F. Nielson, H. R. Nielson, and C. Hankin. Principles of Program Analysis. Springer-Verlag New York, Inc., Secaucus, NJ, USA, 1999.
16. B. C. Pierce. Advanced Topics In Types And Programming Languages. MIT Press, November 2004.
17. F. Pottier. A simple view of type-secure information flow in the pi-calculus. In Proc. IEEE Computer Security Foundations Workshop, pages 320-330, June 2002.
18. F. Pottier and V. Simonet. Information flow inference for ML. In Proc. ACM Symp. on Principles of Programming Languages, pages 319-330, Jan. 2002.
19. A. Russo, J. Hughes, D. Naumann, and A. Sabelfeld. Closing internal timing channels by transformation. In Proc. Annual Asian Computing Science Conference, LNCS, Dec. 2006.
20. A. Russo and A. Sabelfeld. Securing interaction between threads and the scheduler. In Proc. IEEE Computer Security Foundations Workshop, pages 177-189, July 2006.
21. A. Russo and A. Sabelfeld. Security for multithreaded programs under cooperative scheduling. In Proc. PST06, LNCS. Springer-Verlag, June 2006.
22. P. Ryan. Mathematical models of computer security - tutorial lectures. In R. Focardi and R. Gorrieri, editors, Foundations of Security Analysis and Design, volume 2171 of LNCS, pages 1-62. Springer-Verlag, 2001.
23. A. Sabelfeld. The impact of synchronisation on secure information flow in concurrent programs. In Proc. Andrei Ershov International Conference on Perspectives of System Informatics, volume 2244 of LNCS, pages 225-239. Springer-Verlag, July 2001.
24. A. Sabelfeld and H. Mantel. Static confidentiality enforcement for distributed programs. In Proc. Symp. on Static Analysis, volume 2477 of LNCS, pages 376-394. Springer-Verlag, Sept. 2002.
25. A. Sabelfeld and A. C. Myers. Language-based information-flow security. IEEE J. Selected Areas in Communications, 21(1):5-19, Jan. 2003.
26. A. Sabelfeld and D. Sands. A per model of secure information flow in sequential programs. In Proc. European Symp. on Programming, volume 1576 of LNCS, pages 40-58. Springer-Verlag, Mar. 1999.
27. A. Sabelfeld and D. Sands. Probabilistic noninterference for multi-threaded programs. In Proc. IEEE Computer Security Foundations Workshop, pages 200-214, July 2000.
28. A. G. Simon Peyton Jones and S. Finne. Concurrent haskell. In Proceedings of the ACM Symposium on Principles of Programming Languages, January 1996.
29. V. Simonet. Flow caml in a nutshell. In Graham Hutton, editor, Proceedings of the first APPSEM-II workshop, pages 152-165, Mar. 2003.
30. G. Smith. A new type system for secure information flow. In Proc. IEEE Computer Security Foundations Workshop, pages 115-125, June 2001.
31. G. Smith. Probabilistic noninterference through weak probabilistic bisimulation. In Proc. IEEE Computer Security Foundations Workshop, pages 3-13, 2003.
32. G. Smith and D. Volpano. Secure information flow in a multi-threaded imperative language. In Proc. ACM Symp. on Principles of Programming Languages, pages 355-364, Jan. 1998.
33. The GHC Team. The glasgow haskell compiler. Software release. http://haskell.org/ghc/.
34. T. C. Tsai and A. Russo. A library for secure multi-threaded information flow in haskell. Software release. Available at http://www.cs.chalmers.se/ ~russo/tsai.htm.
35. D. Volpano and G. Smith. Probabilistic noninterference in a concurrent language. J. Computer Security, 7(2-3):231-253, Nov. 1999.
36. D. Volpano, G. Smith, and C. Irvine. A sound type system for secure flow analysis. J. Computer Security, 4(3):167-187, 1996.
37. S. Zdancewic and A. C. Myers. Observational determinism for concurrent program security. In Proc. IEEE Computer Security Foundations Workshop, pages 29-43, June 2003.