By reason and authority: A system for authorization of proof-carrying code

Proceedings of the Computer Security Foundations Workshop

Volumn 17, Issue , 2004, Pages 236-250

  Whitehead, Nathan ^a   Abadi, Martín ^a   Necula, George ^b  

^a University of California Santa Cruz   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BINDER LANGUAGES; PROOF-CARRYING CODES (PCC); SAFETY POLICY; SOFTWARE SYSTEMS;

CODES (SYMBOLS); COMPUTER SOFTWARE; CONTRACTS; DECISION THEORY; MATHEMATICAL MODELS; PUBLIC POLICY; SEMANTICS;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS;

EID: 4944234642     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. Martín Abadi, Michael Burrows, Butler Lampson, and Gordon Plotkin. A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems, 15(4):706-734, October 1993.
2. Andrew W. Appel. Hints on proving theorems in Twelf, February 2000. http://www.cs.princeton.edu/~appel/twelf-tutorial/.
3. Andrew W. Appel. Foundational proof-carrying code. In Proceedings of the 16th Annual Symposium on Logic in Computer Science, pages 247-258, June 2001.
4. Andrew W. Appel and Edward W. Felten. Proof-carrying authentication. In Proceedings of the 5th ACM Conference on Computer and Communications Security, pages 52-62, November 1999.
5. Andrew W. Appel and Amy P. Felty. A semantic model of types and machine instructions for proof-carrying code. In Proceedings of the 27th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pages 243-253, January 2000.
6. Lujo Bauer, Michael A. Schneider, and Edward W. Felten. A general and flexible access-control system for the Web. In Proceedings of the 11th USENIX Security Symposium 2002, pages 93-108, 2002.
7. John DeTreville. Binder, a logic-based security language. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 105-113, May 2002.
8. ECMA. Standard ECMA-335: Common Language Infrastructure, December 2001. Available online at http://msdn.microsoft.com/net/ecma/.
9. Conal Elliott and Frank Pfenning. A semi-functional implementation of a higher-order logic programming language. In Peter Lee, editor, Topics in Advanced Language Implementation, pages 289-325. MIT Press, 1991.
10. Jean-Yves Girard. Proofs and Types. Cambridge University Press, 1990. Translated and with appendices by Paul Taylor and Yves Lafont. Available online at http://nick.dcs.qmul.ac.uk/~pt/stable/Proofs+Types.html.
11. Robert Harper, Furio Honsell, and Gordon Plotkin. A framework for defining logics. Journal of the ACM, 40(1):143-184, 1993.
12. Trevor Jim. SD3: A trust management system with certified evaluation. In Proceedings of the 2001 IEEE Symposium on Security and Privacy, pages 106-115, May 2001.
13. Sebastian Lange, Brian LaMacchia, Matthew Lyons, Rudi Martin, Brian Pratt, and Greg Singleton. .NET Framework Security. Addison Wesley, 2002.
14. Eunyoung Lee and Andrew W. Appel. Policy-enforced linking of untrusted components. In Proceedings of the 11th ACM SIGSOFT Symposium on Foundations of Software Engineering, pages 371-374, September 2003.
15. Ninghui Li, Benjamin N. Grosof, and Joan Feigenbaum. Delegation logic: A logic-based approach to distributed authorization. ACM Transactions on Information and System Security, 6(1): 128-171, February 2003.
16. Ninghui Li, John C. Mitchell, and William H. Winsborough. Design of a role-based trust-management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130, May 2002.
17. T. Lindholm and F. Yellin. The Java™ Virtual Machine Specification. Addison Wesley, 1997.
18. Greg Morrisett, David Walker, Karl Crary, and Neal Glew. From System F to Typed Assembly Language. In Proceedings of the 25th ACM Symposium on Principles of Programming Languages, pages 85-97, 1998.
19. Andrew C. Myers. Mostly-Static Decentralized Information Flow Control. PhD thesis, Massachusetts Institute of Technology, Cambridge, MA, January 1999.
20. George C. Necula. Proof-carrying code. In Conference record of POPL '97, the 24th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pages 106-119, 1997.
21. George C. Necula and Robert R. Schneck. A sound framework for untrusted verification-condition generators. In Proceedings of the IEEE Symposium on Logic in Computer Science, July 2003.
22. Microsoft Developer Network. About ActiveX controls, November 2003. http://msdn.microsoft.com/workshop/ components/activex/controls.asp.
23. P. Ørbsek and I. Palsberg. Trust in the A-calculus. Journal of Functional Programming, 3(2):75-85, 1997.
24. Frank Pfenning and Garsten Schürmann. System description: Twelf - A meta-logical framework for deductive systems. In Proceedings of the 16th International Conference on Automated Deduction, pages 202-206. Springer-Verlag LNAI 1632, July 1999.
25. J. D. Ullman. Principles of Database and Knowledge-base Systems, volume 2. Computer Science Press, 1988.