A caller-side inline reference monitor for an object-oriented intermediate language

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5051 LNCS, Issue , 2008, Pages 240-258

  Vanoverberghe, Dries ^a   Piessens, Frank ^b  

^a RESEARCH FOUNDATION FLANDERS FWO   (Belgium)

^b NONE

Author keywords

Inline reference monitor; Security policy enforcement

Indexed keywords

BYTE CODES; INLINE REFERENCE MONITOR; INTERMEDIATE LANGUAGE; INTERNATIONAL CONFERENCES; NON-TRIVIAL; OBJECT-ORIENTED; OPEN OBJECT-BASED DISTRIBUTED SYSTEMS; POLICY ENFORCEMENT; PROGRAM REWRITING; REFERENCE MONITOR; REWRITING ALGORITHM; RUN-TIME; SCHNEIDER; SECURITY CHECKING; SECURITY POLICY ENFORCEMENT; SIMPLIFIED MODELS; VIRTUAL MACHINE; INTERMEDIATE LANGUAGES; REFERENCE MONITORS; RUNTIME ENFORCEMENTS; SOUND AND COMPLETE;

CODES (SYMBOLS); DECENTRALIZED CONTROL; LINGUISTICS; OBJECT ORIENTED PROGRAMMING; PUBLIC POLICY; ALGORITHMS; COMPUTATIONAL LINGUISTICS; FORMAL METHODS; MOBILE SECURITY; NETWORK SECURITY; SECURITY SYSTEMS;

FORMAL METHODS; OBJECT ORIENTED PROGRAMMING;

EID: 46049083056     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-68863-1_15     Document Type: Conference Paper

References (17)

1. Schneider, F.B.: Enforceable security policies. ACM Trans. on Information and System Security 3(1), 30-50 (2000)
2. Erlingsson, U., Schneider, F.B.: IRM enforcement of Java stack inspection. In: IEEE Symposium on Security and Privacy, pp. 246-255 (2000)
3. Bauer, L., Ligatti, J., Walker, D.: Composing security policies with polymer. In: PLDI 2005, pp. 305-314. ACM Press, New York (2005)
4. Evans, D., Twyman, A.: Flexible policy-directed code safety. In: IEEE Symposium on Security and Privacy, pp. 32-45 (1999)
5. Saltzer, J., Schroeder, M.: The protection of information in computer systems. IEEE 9(63) (1975)
6. Erlingsson, U.: The inlined reference monitor approach to security policy enforcement. PhD thesis, Cornell University (2004); Adviser-Fred B. Schneider
7. Erlingsson, S.: SASI enforcement of security policies: A retrospective. In: WNSP: New Security Paradigms Workshop. ACM Press, New York (2000)
8. Provos, N.: Improving host security with system call policies. In: SSYM'03: Proceedings of the 12th conference on USENIX Security Symposium, p. 18. USENIX Association, Berkeley, CA, USA (2003)
9. S3MS: Security of software and services for mobile systems (2007), http://www.s3ms.org/
10. European Computer Machinery Association: Standard ECMA-335: Common Language Infrastructure, 4th edn. (June 2006)
11. Fruja, N.G.: Type Safety of C# and.NET CLR. PhD thesis, ETH Zurich (2006)
12. Vanoverberghe, D., Piessens, F.: A caller-side inline reference monitor for object-oriented intermediate language: Extended version (2008), http://www.cs.kuleuven.be/publicaties/rapporten/cw/CW512.abs.html
13. Evain, J.: Cecil, http://www.mono-project.com/Cecil
14. Lindholm, T., Yellin, F.: The Java(TM) Virtual Machine Specification, April 1999. Prentice Hall PTR, Englewood Cliffs (1999)
15. Ligatti, J., Bauer, L., Walker, D.: Edit automata: Enforcement mechanisms for run-time security policies. International Journal of Information Security 4(1-2), 2-16 (2005)
16. Kiczales, G., Lamping, J., Menhdhekar, A., Maeda, C., Lopes, C., Loingtier, J.-M., Irwin, J.: Aspect-oriented programming. In: Aksit, M., Matsuoka, S. (eds.) ECOOP 1997. LNCS, vol. 1241, pp. 220-242. Springer, Heidelberg (1997)
17. Jeffrey, A.S.A., Rathke, J.: Java jr.: Fully abstract trace semantics for a core Java language. In: Sagiv, M. (ed.) ESOP 2005. LNCS, vol. 3444, pp. 423-438. Springer, Heidelberg (2005)