A certified lightweight non-interference Java bytecode verifier

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4421 LNCS, Issue , 2007, Pages 125-140

  Barthe, Gilles ^a   Pichardie, David ^b   Rezk, Tamara ^a  

^a INRIA   (France)

^b INRIA   (France)

Author keywords

[No Author keywords available]

Indexed keywords

BINARY CODES; HIGH LEVEL LANGUAGES; MACHINE ORIENTED LANGUAGES; SEMANTICS; VERIFICATION;

INFORMATION FLOW TYPE SYSTEMS; SEMANTICAL CONDITION;

JAVA PROGRAMMING LANGUAGE;

EID: 37149048216     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-71316-6_10     Document Type: Conference Paper

References (23)

1. A.W. Appel and A.P. Felty. A semantic model of types and machine instuctions for proof-carrying code. In Proceedings of POPL '00, pages 243-253. ACM Press, 2000.
2. B.E. Aydemir, A. Bohannon, M. Fairbairn, J.N. Foster, B.C. Pierce, P. Sewell, D. Vytiniotis, G. Washburn, S. Weirich, and S. Zdancewic. Mechanized Metatheory for the Masses: The PoplMark Challenge. In Proceedings of TPHOLs'05, volume 3603 of Lecture Notes in Computer Science, pages 50-65. Springer-Verlag, 2005.
3. A. Banerjee and D. Naumann. Stack-based access control for secure information flow. Journal of Functional Programming, 15:131-177, March 2005.
4. G. Barthe, D. Naumann, and T. Rezk. Deriving an Information Flow Checker and Certifying Compiler for Java. In Symposium on Security and Privacy, 2006. IEEE Press, 2006.
5. G. Barthe, D. Pichardie, and T. Rezk. Non-interference for low level languages. Technical report, INRIA, 2006. http://hal.inria.fr/inria-00106182.
6. G. Barthe and T. Rezk. Non-interference for a JVM-like language. In M. Fähndrich, editor, Proceedings of TLDI'05, pages 103-112. ACM Press, 2005.
7. F. Besson, T. Jensen, and D Pichardie. Proof-Carrying Code from Certified Abstract Interpretation and Fixpoint Compression. Theoretical Computer Science, 364(3) :273-291, 2006.
8. P. Bieber, J. Cazin, V. Wiels, G. Zanon, P. Girard, and J.-L. Lanet. Checking Secure Interactions of Smart Card Applets: Extended version. Journal of Computer Security, 10:369-398, 2002.
9. E. Bonelli, A.B. Compagnoni, and R. Medel. Information flow analysis for a typed assembly language with polymorphic stacks. In Proceedings of CASSIS'05, volume 3956 of Lecture Notes in Computer Science, pages 37-56. Springer-Verlag, 2005.
10. S. Genaim and F. Spoto. Information Flow Analysis for Java Bytecode. In Proceedings of VMCAI'05, volume 3385 of Lecture Notes in Computer Science, pages 346-362. Springer-Verlag, 2005.
11. R. Giacobazzi and I. Mastroeni. Abstract non-interference: Parameterizing noninterference by abstract interpretation. In Proceedings of POPL'04, pages 186-197. ACM Press, 2004.
12. D. Hedin and D. Sands. Noninterference in the presence of non-opaque pointers. In Proceedings of CSFW'06, pages 255-269. IEEE Computer Society Press, 2006.
13. S. Hunt and D. Sands. On Flow-Sensitive Security Types. In Proceedings of POPL'06, pages 79-90. ACM Press, 2006.
14. X. Leroy. Bytecode verification on Java smart cards. Software-practice and experience, 32(4):319-340, April 2002.
15. A.C. Myers. Jflow: Practical mostly-static information flow control. In Proceedings of POPL'99, pages 228-241. ACM Press, 1999.
16. D. Naumann. Verifying a secure information flow analyzer. In Proceedings of TPHOLs'05, volume 3603 of Lecture Notes in Computer Science, pages 211-226. Springer-Verlag, 2005.
17. T. Rezk. Verification of confidentiality policies for mobile code. PhD thesis, Université de Nice Sophia-Antipolis, 2006.
18. A. Russo and A. Sabelfeld. Securing interaction between threads and the scheduler. In Proceedings of CSFW'06, 2006.
19. A. Sabelfeld and A. Myers. Language-Based Information-Flow Security. IEEE Journal on Selected Areas in Comunications, 21:5-19, January 2003.
20. A. Sabelfeld and D. Sands. Dimensions and principles of declassification. In Proceedings of CSFW'05. IEEE Press, 2005.
21. D. Volpano and G. Smith. A Type-Based Approach to Program Security. In M. Bidoit and M. Dauchet, editors, Proceedings of TAPSOFT'97, volume 1214 of Lecture Notes in Computer Science, pages 607-621. Springer-Verlag, 1997.
22. D. Yu and N. Islam. A typed assembly language for confidentiality. In P. Sestoft, editor, Proceedings of ESOP'06, volume 3924 of Lecture Notes in Computer Science, pages 162-179. Springer-Verlag, 2006.
23. D. Zanardini. Certified Abstract Non-interference: Object-Oriented Code Validation for Information Flow Security. PhD thesis, Università di Verona, April 2006.