Closing internal timing channels by transformation

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4435 LNCS, Issue , 2007, Pages 120-135

  Russo, Alejandro ^a   Hughes, John ^a   Naumann, David ^b   Sabelfeld, Andrei ^a  

^a CHALMERS UNIVERSITY OF TECHNOLOGY   (Sweden)

^b Stevens Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SCIENCE; INFORMATION RETRIEVAL SYSTEMS; MULTITASKING; TECHNOLOGY;

COMPUTING SCIENCE; COVERT CHANNELS; EXECUTION TIME; EXTERNAL-; IF THERE ARE; INFORMATION FLOWS; MULTI-THREADED PROGRAMS; SECURE SOFTWARE; TARGET LANGUAGES; TIMING CHANNELS;

TIME MEASUREMENT;

EID: 49949108946     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-77505-8_10     Document Type: Conference Paper

References (31)

1. Report on resource and information flow security requirements, Deliverable D1.1 of the EU 1ST FET GC2 MOBIUS project. (March 2006), http://mobius.inria.fr/
2. Agat, J.: Transforming out timing leaks. In: Proc. POPL 2002, pp. 40-53 (January 2000)
3. Boudol, G., Castellani, I.: Noninterference for concurrent programs. In: Orejas, F., Spirakis, P.G., van Leeuwen, J. (eds.) ICALP 2001. LNCS, vol. 2076, pp. 382-395. Springer. Heidelberg (2001)
4. Boudol, G., Castellani, I.: Non-interference for concurrent programs and thread systems. Theoretical Computer Science 281(1). 109-130 (2002)
5. Denning, D.E., Denning, P.J.: Certification of programs for secure information flow. Comm. of the ACM 20(7), 504-513 (1977)
6. Focardi, R., Gorrieri, R.: Classification of security properties (part I: Information flow). In: Focardi, R., Gorrieri, R. (eds.) Foundations of Security Analysis and Design. LNCS, vol. 2171, pp. 331-396. Springer. Heidelberg (2001)
7. Honda, K., Vasconcelos, V., Yoshida, N.: Secure information flow as typed process behaviour. In: Smolka, G. (ed.) ESOP 2000 and ETAPS 2000. LNCS, vol. 1782, Springer, Heidelberg (2000)
8. Honda, K., Yoshida, N.: A uniform type structure for secure information flow. In: Proc. ACM Symp. on Principles of Programming Languages, pp. 81-92. ACM Press, New York (2002)
9. Huisman, M., Worah, P., Sunesen, K.: A temporal logic characterisation of observational determinism. In: Proc. IEEE Computer Security Foundations Workshop (July 2006)
10. JSR 118 Expert Group. Mobile information device profile (MIDP). version 2.0. Java specification request, Java Community Process (November 2002)
11. JSR 179 Expert Group. Location API for J2ME. Java specification request, Java Community Process (September 2003)
12. Knudsen, J.: Networking, user experience, and threads. Sun Technical Articles and Tips, (2002), http://developers.sun.com/techtopics/mobility/midp/ articles/threading/
13. Köpf, B., Mantel, H.: Eliminating implicit information leaks by transformational typing and unification. In: Dimitrakos, T., Martinelli. F., Ryan, P.Y.A., Schneider. S. (eds.) FAST 2005. LNCS, vol. 3866, Springer, Heidelberg (2006)
14. Mahmoud, Q.H.: Preventing screen lockups of blocking operations. Sun Technical Articles and Tips (2004). http://developers.sun.com/techtopics/ mobility/midp/ttips/screenlock/
15. Pottier, F.: A simple view of type-secure information flow in the pi-calculus. In: Proc. IEEE Computer Security Foundations Workshop, pp. 320-330. IEEE Computer Society Press, Los Alamitos (2002)
16. Russo, A., Sabelfeld, A.: Securing interaction between threads and the scheduler. In: Proc. IEEE Computer Security Foundations Workshop, pp. 177-189. IEEE Computer Society Press, Los Alamitos (2006)
17. Russo, A., Sabelfeld, A.: Security for multithreaded programs under cooperative scheduling. In: Virbitskaite, I., Voronkov, A. (eds.) PSI 2006. LNCS, vol. 4378, Springer, Heidelberg (2007)
18. Ryan, P.: Mathematical models of computer security-tutorial lectures. In: Focardi, R., Gorrieri. R. (eds.) FOSAD 2001. LNCS, vol. 2946, Springer. Heidelberg (2004)
19. Sabelfeld, A.: The impact of synchronisation on secure information flow in concurrent programs. In: Bjømer, D., Broy, M., Zamulin, A.V. (eds.) PSI 2001. LNCS, vol. 2244, Springer, Heidelberg (2001)
20. Sabelfeld, A., Mantel, H.: Static confidentiality enforcement for distributed programs. In: Hermenegildo. M.V., Puebla, G. (eds.) SAS 2002. LNCS, vol. 2477. Springer, Heidelberg (2002)
21. Sabelfeld, A., Myers, A.C.: Language-based information-flow security. IEEE J. Selected Areas in Communications 21(1). 5-19 (2003)
22. Sabelfeld, A., Sands, D.: Probabilistic noninterference for multi-threaded programs. In: Proc. IEEE Computer Security Foundations Workshop, pp. 200-214. IEEE Computer Society Press, Los Alamitos (2000)
23. Smith, G.: A new type system for secure information flow. In: Proc. IEEE Computer Security Foundations Workshop, pp. 115-125. IEEE Computer Society Press, Los Alamitos (2001)
24. Smith, G.: Probabilistic noninterference through weak probabilistic bisimulation. In: Proc. IEEE Computer Security Foundations Workshop, pp. 3-13. IEEE Computer Society Press, Los Alamitos (2003)
25. Smith, G., Volpano, D.: Secure information flow in a multi-threaded imperative language. In: Proc. ACM Symp. on Principles of Programming Languages, pp. 355-364. ACM Press, New York (1998)
26. Smith, S.F., Thober, M.: Refactoring programs to secure information flows. In: PLAS 2006, pp. 75-84. ACM Press, New York (2006)
27. Volpano, D., Smith, G.: Probabilistic noninterference in a concurrent language. J. Computer Security 7(2-3), 231-253 (1999)
28. Volpano, D., Smith, G., Irvine, C.: A sound type system for secure flow analysis. J. Computer Security 4(3), 167-187 (1996)
29. Winskel, G.: The Formal Semantics of Programming Languages: An Introduction. MIT Press, Cambridge (1993)
30. Zdancewic, S., Myers, A.C.: Observational determinism, for concurrent program, security. In: Proc. IEEE Computer Security Foundations Workshop, pp. 29-43. IEEE Computer Society Press, Los Alamitos (2003)
31. Zheng, L., Chong, S., Myers, A.C., Zdancewic, S.: Using replication and partitioning to build, secure distributed systems. In: Proc. IEEE Symp. on Security and Privacy, pp. 236-250. IEEE Computer Society Press, Los Alamitos (2003)