Security monitor inlining for multithreaded java

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5653 LNCS, Issue , 2009, Pages 546-569

  Dam, Mads ^a   Jacobs, Bart ^b   Lundblad, Andreas ^a   Piessens, Frank ^b  

^a ROYAL INSTITUTE OF TECHNOLOGY   (Sweden)

^b UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

[No Author keywords available]

Indexed keywords

CONSERVATIVITY; CORRECTNESS CRITERION; INLINING; MULTITHREADED; OPEN PROBLEMS; POLICY ENFORCEMENT; PROGRAM MONITORING; SECURITY POLICY ENFORCEMENT;

OBJECT ORIENTED PROGRAMMING;

JAVA PROGRAMMING LANGUAGE;

EID: 69949167255     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-03013-0_25     Document Type: Conference Paper

References (27)

1. Evans, D., Twyman, A.: Flexible policy-directed code safety. In: IEEE Symposium on Security and Privacy, pp. 32-45 (1999)
2. Erlingsson, Ú., Schneider, F.B.: SASI enforcement of security policies: a retrospective. In: Proc. Workshop on New Security Paradigms (NSPW 1999), pp. 87-95. ACM Press, New York (2000)
3. Schneider, F.B.: Enforceable security policies. ACM Trans. Information and System Security 3(1), 30-50 (2000)
4. Hamlen, K.W., Morrisett, G., Schneider, F.B.: Computability classes for enforcement mechanisms. ACM Trans. Program. Lang. Syst. 28(1), 175-205 (2006)
5. Erlingsson, Ú.: The inlined reference monitor approach to security policy enforcement. Ph.D thesis, Dept. of Computer Science, Cornell University (2004)
6. Bauer, L., Ligatti, J., Walker, D.: Composing security policies with polymer. In: PLDI, pp. 305-314 (2005)
7. Hamlen, K.W., Morrisett, G., Schneider, F.B.: Certified in-lined reference monitoring on .NET. In: PLAS, pp. 7-16 (2006)
8. Erlingsson, Ú., Schneider, F.B.: IRM enforcement of Java stack inspection. In: IEEE Symposium on Security and Privacy, pp. 246-255 (2000)
9. Aktug, I., Dam, M., Gurov, D.: Provably correct runtime monitoring. In: Cuellar, J., Maibaum, T., Sere, K. (eds.) FM 2008. LNCS, vol. 5014, pp. 262-277. Springer, Heidelberg (2008)
10. Vanoverberghe, D., Piessens, F.: A caller-side inline reference monitor for an objectoriented intermediate language. In: Barthe, G., de Boer, F.S. (eds.) FMOODS 2008. LNCS, vol. 5051, pp. 240-258. Springer, Heidelberg (2008)
11. Chen, F., Rosu, G.: Java-MOP: A monitoring oriented programming environment for Java. In: Halbwachs, N., Zuck, L.D. (eds.) TACAS 2005, vol. 3440, pp. 546-550. Springer, Heidelberg (2005)
12. Hamlen, K.W., Jones, M.: Aspect-oriented in-lined reference monitors. In: PLAS, pp. 11-20 (2008)
13. Dam, M., Jacobs, B., Lundblad, A., Piessens, F.: Provably correct inline monitoring for multithreaded Java-like programs. Journal of Computer Security (2009)
14. Ligatti, J., Bauer, L., Walker, D.: Edit automata: enforcement mechanisms for run-time security policies. Int. J. Inf. Sec. 4(1-2), 2-16 (2005)
15. Ligatti, J.A.: Policy Enforcement via Program Monitoring. Ph.D thesis, Princeton University (2006)
16. Viswanathan, M.: Foundations for the run-time analysis of software systems. Ph.D thesis, University of Pennsylvania (2000)
17. Verhanneman, T., Piessens, F., De Win, B., Joosen, W.: Uniform application-level access control enforcement of orginzationwide policies. In: Twenty-First Annual Computer Security Applications Conference, pp. 389-398 (2005)
18. Dantas, D.S., Walker, D.: Harmless advice. In: POPL, pp. 383-396 (2006)
19. Shah, V., Hill, F.: An aspect-oriented security framework. In: Proceedings of the DARPA Information Survivability Conference, pp. 143-145 (2004)
20. Gosling, J., Joy, B., Steele, G., Bracha, G.: Java Language Specification, 3rd edn. Prentice Hall, Englewood Cliffs (2005)
21. Jeffrey, A., Rathke, J.: Java Jr: Fully abstract trace semantics for a core Java language. In: ESOP, pp. 423-438 (2005)
22. Jeffrey, A., Rathke, J.: A fully abstract may testing semantics for concurrent objects. Theor. Comput. Sci. 338(1-3), 17-63 (2005)
23. Aktug, I., Naliuka, K.: ConSpec - a formal language for policy specification. Electron. Notes Theor. Comput. Sci. 197(1), 45-58 (2008)
24. Lindholm, T., Yellin, F.: Java Virtual Machine Specification. Addison-Wesley Longman Publishing Co., Inc., Boston (1999)
25. ObjectWeb: Asm - home page (February 2008)
26. Freund, S.N., Mitchell, J.C.: A type system for object initialization in the Java bytecode language. ACM Trans. Program. Lang. Syst. 21(6), 1196-1250 (1999)
27. Leroy, X.: Java bytecode verification: Algorithms and formalizations. J. Autom. Reasoning 30(3-4), 235-269 (2003)