Dynamic dependency monitoring to secure information flow

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 2007, Pages 203-217

  Shroff, Paritosh ^a   Smith, Scott F ^a   Thober, Mark ^a  

^a JOHNS HOPKINS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INDIRECT INFORMATION FLOWS; RUN-TIME INFORMATION;

COMPUTER SYSTEMS; SECURITY OF DATA;

INFORMATION ANALYSIS;

EID: 35048880192     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2007.20     Document Type: Conference Paper

References (40)

1. T. Amtoft, S. Bandhakavi, and A. Banerjee. A logic for information flow in object-oriented programs. In POPL'06: the 33rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, 2006.
2. A. Banerjee and D. Naumann. Using access control for secure information flow in a Java-like language. In CSFW'03: IEEE Computer Security Foundations Workshop, 2003.
3. Y. Beres and C. I. Dalton. Dynamic label binding at runtime. In NSPW'03: Workshop on New Security Paradigms, 2003.
4. N. Broberg and D. Sands. Flow locks: Towards a core calculus for dynamic flow policies. In ESOP'06: the 15th European Symposium on Programming, 2006.
5. J. Brown and T. Knight, Jr. A minimal trusted computing base for dynamically ensuring secure information flow. Technical, report, MIT, November 2001.
6. S. Chong and A. C. Myers. Security policies for downgrading. In CCS'04: the 11th ACM Conference on Computer and Communications Security, 2004.
7. T. Christiansen, J. Orwant, and L. Wall. Programming Perl. O'Reilly, 3rd edition, July 2000.
8. D. E. Denning. A lattice model of secure information flow. Communications of ACM, 19(5):236-243, 1976.
9. D. E. R. Denning. Cryptography and Data Security. Addison-Wesley Longman Publishing Co., Inc., Boston, MA, USA, 1982.
10. J. S. Fenton. Memoryless subsystems. Computer Journal, 17(2):143-147, 1974.
11. I. Gat and H. J. Saal. Memoryless execution: A programmer's viewpoint. Software Practice and Experience, 6(4):463-471, Oct-Dec 1976.
12. V. Haldar, D. Chandra, and M. Franz. Practical, dynamic information flow for virtual machines. In PLID'05: the 2nd International Workshop on Programming Language Interference and Dependence, 2005.
13. C. Hammer, J. Krinke, and G. Snelting. Information flow control for java based on path conditions in dependence graphs. In IEEE International Symposium on Secure Software Engineering, 2006.
14. N. Heintze and J. G. Riecke. The SLam calculus: Programming with secrecy and integrity. In POPL'98: the 25th ACM Symposium on Principles of Programming Languages, 1998.
15. M. Hicks, S. Tse, B. Hicks, and S. Zdancewic. Dynamic updating of information-flow policies. In FCS'05: Foundations of Computer Security Workshop, 2005.
16. S. Hunt and D. Sands. On flow-sensitive security types. In POPL'06: the 33rd ACM SIGPLAN-SIGACT Symposium, on Principles of Programming Languages, 2006.
17. L. C. Lam and T. Chiueh. A general dynamic information flow tracking framework for security applications. In ACSAC'06: 22nd Annual Computer Security Applications Conference, 2006.
18. G. Le Guernic, A. Banerjee, T. Jensen, and D. A. Schmidt. Automata-based confidentiality monitoring. In ASIAN'06: the 11th Asian Computing Science Conference on Secure Software, 2006.
19. G. Le Guernic and T. Jensen. Monitoring information flow. In FCS '05: Workshop on Foundations of Computer Security, 2005.
20. P. Li and S. Zdancewic. Downgrading policies and relaxed noninterference, In POPL'05: the 32nd ACM SIGPLAN-SIGACT Symposium on. Principles of Programming Languages, 2005.
21. P. Li and S. Zdancewic. Encoding information flow in haskell. In CSFW'06: the 19th IEEE Computer Security Foundations Workshop, 2006.
22. W. Masri and A. Podgurski. Using dynamic information flow analysis to detect attacks against applications. In SESS'05: Workshop on Software engineering for Secure Systems-building trustworthy applications, 2005.
23. W. Masri, A. Podgurski, and D. Leon. Detecting and debugging insecure information flows. In ISSRE'04: the 15th International Symposium on Software Reliability Engineering, 2004.
24. A. Myers, A. Sabelfeld, and S. Zdancewic. Enforcing robust declassification. In CSFW'04: IEEE Computer Security Foundations Workshop, 2004.
25. A. C. Myers. JFlow: Practical mostly-static information flow control. In POPL'99: ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, 1999.
26. A. C. Myers and B. Liskov. A decentralized model for information flow control. In SOSP'97: Symposium on Operating Systems Principles, 1997.
27. E. Nuutila. Efficient transitive closure computation in large digraphs. Acta Polytechnica Scandinavia: Math. Comput. Eng., 74:1-124, 1995.
28. F. Pottier and V. Simonet. Information flow inference for ML. In POPL'02: the 29th ACM SLGPLAN-SLGACT Symposium on Principles of Programming Languages, 2002.
29. A. Sabelfeld and A. C. Myers. Language-based information-flow security. IEEE Jounal on Selected Areas in Communications, 2003.
30. P. Shroff, S. F. Smith, and M. Thober. Dynamic dependency monitoring to secure information flow. Technical report, Department of Computer Science, Johns Hopkins Univeristy, February 2007. http://www.cs.jhu.edu/~scott/pll/papers/ dynamic-monitoring-tr.pdf.
31. G. E. Suh, J. W. Lee, D. Zhang, and S. Devadas. Secure program execution via dynamic information flow tracking. In ASPLOS'04: International Conference on Architectural Support for Programming Languages and Operating Systems, 2004.
32. N. Swamy, M. Hicks, S. Tse, and S. Zdancewic. Managing policy updates in security-typed languages. In CSFW'06: the 19th IEEE Computer Security Foundations Workshop, 2006.
33. S. Tse and S. Zdancewic. Run-time principals in information-flow type systems. In IEEE Symposium on Security and Privacy, 2004.
34. N. Vachharajani, M. J. Bridges, J. Chang, R. Rangan, G. Ottoni, J. A. Blome, G. A. Reis, M. Vachharajani, and D. I. August. RIFLE: An architectural framework for user-centric information-flow security. In MLCRO '04: International Symposium on Micro architecture, 2004.
35. D. Volpano, G. Smith, and C. Irvine. A sound type system for secure flow analysis. Journal of Computer Security, 4(3):167-187, Dec. 1996.
36. S. Warshall. A theorem on boolean matrices. Journal of the ACM, 9(1):11-12, 1962.
37. C. Weissman. Security controls in the adept-50 time-sharing system. In AFLPS Fall Joint Computer Conference, 1969.
38. J. P. L. Woodward. Exploiting the dual nature of sensitivity labels. In IEEE Symposium on Security and Privacy, 1987.
39. W. Wulf, E. Cohen, W. Corwin, A. Jones, R. Levin, C. Pierson, and F. Pollack. Hydra: the kernel of a multiprocessor operating system. Communications of ACM, 17(6):337-345, 1974.
40. L. Zheng and A. C. Myers. Dynamic security labels and noninterference, In FAST'04: Workshop on Formal Aspects in Security and Trust, 2004.