Dynamic management of capabilities in a network aware coordination language

Journal of Logic and Algebraic Programming

Volumn 78, Issue 8, 2009, Pages 665-689

  Gorla, Daniele ^a   Pugliese, Rosario ^b  

^a SAPIENZA UNIVERSITY OF ROME   (Italy)

^b UNIVERSITY OF FLORENCE   (Italy)

Author keywords

Capability based access control; Mobility control; Process distribution and mobility; Resource usage

Indexed keywords

ACCESS CONTROL MODELS; ACCESS CONTROL POLICIES; CAPABILITY-BASED ACCESS CONTROL; CONTROLLING PROCESS; COORDINATION LANGUAGE; DYNAMIC MANAGEMENT; DYNAMIC MODIFICATIONS; MOBILITY CONTROL; MODELING NETWORKS; PROCESS DISTRIBUTION AND MOBILITY; REALISTIC SCENARIO; RESOURCE USAGE; RUN-TIME ERRORS; STATIC AND DYNAMIC;

ACCESS CONTROL; LINGUISTICS; SECURITY SYSTEMS;

PROCESS CONTROL;

EID: 70349448576     PISSN: 15678326     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jlap.2008.12.001     Document Type: Article

References (63)

1. Abadi M. Logic in access control. 18th IEEE Symposium on Logic in Computer Science (LICS 2003) (2003), IEEE Computer Society 228-233
2. M. Abadi, C. Fournet, Mobile values, new names, and secure communication, in: POPL, 2001, pp. 104-115.
3. M. Abadi, C. Fournet, Access control based on execution history, in: 10th Annual Network and Distributed System Security Symposium (NDSS'03), The Internet Society, 2003.
4. Adão P., and Fournet C. Cryptographically sound implementations for communicating processes. In: Bugliesi M., Preneel B., Sassone V., and Wegener I. (Eds). ICALP (2), Lecture Notes in Computer Sciences, vol. 4052 (2006), Springer 83-94
5. Arnold K., Freeman E., and Hupfer S. JavaSpaces Principles, Patterns and Practice (1999), Addison-Wesley
6. D. Balzarotti, M. Cova, V. Felmetsger, N. Jovanovic, E. Kirda, C. Kruegel, G. Vigna, Saner: composing static and dynamic analysis to validate sanitization in web applications, in: IEEE Symposium on Security and Privacy, 2008, pp. 387-401.
7. S. Bandhakavi, W. Winsborough, M. Winslett, A trust management approach for flexible policy management in security-typed languages, in: CSF'08: Proceedings of the 21st IEEE Computer Security Foundations Symposium, IEEE Computer Society, 2008, pp. 33-47.
8. Bettini L., De Nicola R., and Pugliese R. Klava: a Java Package for Distributed and Mobile Applications. Software - Practice and Experience 32 (2002) 1365-1394
9. Blaze M., Feigenbaum J., and Keromytis A.D. The role of trust management in distributed systems security. Secure Internet Programming: Issues in Distributed and Mobile Object Systems, LNCS, vol. 1603 (1999), Springer-Verlag 185-210
10. M. Blaze, J. Feigenbaum, J. Lacy, Decentralized trust management, in: IEEE Symposium on Security and Privacy, 1996, pp. 164-173.
11. Bugliesi M., Castagna G., and Crafa S. Access control for mobile agents: the calculus of boxed ambients. ACM Trans. Program. Lang. Syst. 26 1 (2004) 57-124
12. Bugliesi M., and Giunti M. Secure implementations of typed channel abstractions. In: Hofmann M., and Felleisen M. (Eds). POPL (2007), ACM 251-262
13. Cardelli L., Ghelli G., and Gordon A.D. Types for the ambient calculus. J. Inform. Comput. 177 2 (2002) 160-194
14. L. Cardelli, A.D. Gordon, Mobile ambients, Theoret. Comput. Sci. 240(1) (2000) 177-213, an extended abstract in: Proceedings of FoSSaCS'98, Lecture Notes in Computer Science, vol. 1378, Springer, 1998, pp. 140-155.
15. Castagna G., Vitek J., and Nardelli F.Z. The seal calculus. Inf. Comput. 201 1 (2005) 1-54
16. Chaudhuri A. Dynamic access control in a concurrent object calculus. Proceedings of CONCUR. LNCS vol. 4137 (2006), Springer 263-278
17. A. Chaudhuri, M. Abadi, Secrecy by typing and file-access control, in: CSFW'06: Proceedings of the 19th IEEE workshop on Computer Security Foundations, IEEE Computer Society, 2006, pp. 112-123.
18. Chen H., and Chong S. Owned policies for information security. Proceedings of CSFW (2004), IEEE Computer Society 126-138
19. Chu Y.-H., Feigenbaum J., LaMacchia B.A., Resnick P., and Strauss M. Referee: trust management for web applications. Comput. Networks 29 8-13 (1997) 953-964
20. V.-L. Chung, C.S. MacDonald, The development of a distributed capability system for VLOS, in: F. Lai, J. Morris (Eds.), Seventh Asia-Pacific Computer Systems Architectures Conference (ACSAC2002), Melbourne, Australia, 2002.
21. Ciancarini P., Tolksdorf R., Vitali F., Rossi D., and Knoche A. Coordinating multiagent applications on the WWW: a reference architecture. IEEE Transactions on Software Engineering 24 5 (1998) 362-366
22. Coppo M., Dezani M., Giovannetti E., and Pugliese R. Dynamic and local typing for mobile ambients. Proceedings of IFIP-TCS'04 (2004), Kluwer 577-590
23. Czerwinski S.E., Zhao B.Y., Hodes T.D., Joseph A.D., and Katz R.H. An architecture for a secure service discovery service. MobiCom'99: Proceedings of the 5th Annual ACM/IEEE International Conference on Mobile Computing and Networking (1999), ACM Press 24-35
24. De Nicola R., Ferrari G., and Pugliese R. Klaim: a kernel language for agents interaction and mobility. IEEE Transactions on Software Engineering 24 5 (1998) 315-330
25. De Nicola R., Ferrari G., Pugliese R., and Venneri B. Types for access control. Theoret. Comput. Sci. 240 1 (2000) 215-254
26. Degano P., Levi F., and Bodei C. Safe ambients: control flow analysis and security. ASIAN Computing Science Conference - ASIAN'00. LNCS vol. 1961 (2000), Springer 199-214
27. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, T. Ylonen, SPKI certificate theory, IETF RFC 2693, September 1999.
28. Focardi R., Lucchi R., and Zavattaro G. Secure shared data-space coordination languages: a process algebraic surveys. Sci. Comput. Program. 63 1 (2006) 3-15
29. Fournet C., Gonthier G., Levy J.J., Maranget L., and Remy D. A calculus of mobile agents. In: Montanari U., and Sassone V. (Eds). Proceedings of 7th Int. Conf. on Concurrency Theory (CONCUR'96). LNCS vol. 1119 (1996), Springer-Verlag 406-421
30. C. Fournet, T. Rezk, Cryptographically sound implementations for typed information-flow security, in: G.C. Necula, P. Wadler (Eds.), 35th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), 2008, pp. 323-335.
31. Gelernter D. Generative communication in Linda. ACM Transactions on Programming Languages and Systems 7 1 (1985) 80-112
32. D. Gelernter, Multiple tuple spaces in Linda, in: J.G. Goos (Ed.), Proceedings, PARLE'89, LNCS, vol. 365, 1989, pp. 20-27.
33. L. Gong, A secure identity-based capability system, in: IEEE Symposium on Security and Privacy, 1989, pp. 56-65.
34. Gorla D., and Pugliese R. Enforcing security policies via types. Proceedings of Security in Pervasive Computing (SPC'03). LNCS vol. 2802 (2003), Springer-Verlag 88-103
35. Gorla D., and Pugliese R. Resource access and mobility control with dynamic privileges acquisition. Proceedings of ICALP'03. LNCS vol. 2719 (2003), Springer-Verlag 119-132
36. Gorrieri R., Lucchi R., and Zavattaro G. Supporting secure coordination in spaces. Fundam. Inf. 73 4 (2006) 479-506
37. Hagimont D., and Palma N.D. Non-functional capability-based access control in the java environment. 8th Int. Conf. on Object-Oriented Information Systems. LNCS vol. 2425 (2002), Springer 323-335
38. Handorean R., and Roman G.-C. Secure sharing of tuple spaces in ad hoc settings. Elect. Notes Theor. Comput. Sci. 85 3 (2003)
39. Hansen R.R., Probst C.W., and Nielson F. Sandboxing in myklaim. First International Conference on Availability, Reliability and Security (ARES) (2006), IEEE Computer Society 174-181
40. Hennessy M., and Riely J. Information flow vs. resource access in the asynchronous pi-calculus. ACM Trans. Program. Lang. Syst. 24 5 (2002) 566-591
41. Hennessy M., and Riely J. Resource access control in systems of mobile agents. Inform. Comput. 173 (2002) 82-120
42. Laneve C., and Zavattaro G. Foundations of web transactions. Proceedings of FoSSaCS'05. LNCS vol. 3441 (2005), Springer 282-298
43. N. Li, B.N. Grosof, J. Feigenbaum, A practically implementable and tractable delegation logic, in: IEEE Symposium on Security and Privacy, 2000, pp. 27-42.
44. Merro M., and Hennessy M. A bisimulation-based semantic theory of safe ambients. ACM Trans. Program. Lang. Syst. 28 2 (2006) 290-330
45. M. Miller, K. Yee, J. Shapiro, Capability myths demolished, Technical Report SRL2003-02, Systems Research Laboratory, 2003.
46. Necula G. Proof-carrying code. Proceedings of POPL'97 (1997), ACM 106-119
47. Nielson F., Nielson H.R., and Hansen R.R. Validating firewalls using flow logics. Theor. Comput. Sci. 283 2 (2002) 381-418
48. Nielson H.R., and Nielson F. Shape analysis for mobile ambients. Nord. J. Comput. 8 2 (2001) 233-275
49. Omicini A., and Zambonelli F. Coordination for internet application development. Autonom. Agents Multi-Agent Syst. 2 3 (1999) 251-269 Special Issue on Coordination Mechanisms and Patterns for Web Agents.
50. Picco G., Murphy A., and Roman G.-C. Lime: Linda meets mobility. In: Garlan D. (Ed). Proceedings of the 21st Int. Conference on Software Engineering (ICSE'99) (1999), ACM Press 368-377
51. Riely J., and Hennessy M. Trust and partial typing in open systems of mobile agents. J. Autom. Reason. 31 3-4 (2003) 335-370
52. Rowstron A. WCL: a web co-ordination language. World Wide Web J. 1 3 (1998) 167-179
53. Schneider F.B., Morrisett G., and Harper R. A language-based approach to security. Informatics: 10 Years Ahead, 10 Years Back. Conference on the Occasion of Dagstuhl's 10th Anniversary, LNCS, vol. 2000 (2000), Springer 86-101
54. J.S. Shapiro, J.M. Smith, D.J. Farber, EROS: a fast capability system, in: Symposium on Operating Systems Principles, 1999, pp. 170-185.
55. Shroff P., Smith S.F., and Thober M. Dynamic dependency monitoring to secure information flow. Proceedings of CSF (2007), IEEE Computer Society 203-217
56. Sun Microsystems, Javaspace specification, 1999. .
57. Swamy N., Hicks M., Tse S., and Zdancewic S. Managing policy updates in security-typed languages. Proceedings of CSFW (2006), IEEE Computer Society 202-216
58. Tanenbaum A.S., Mullender S.J., and van Renesse R. Using sparse capabilities in a distributed operating system. Proceedings of the 6th International Conference on Distributed Computing Systems (ICDCS) (1986), IEEE Computer Society 558-563
59. S. Tse, S. Zdancewic, Run-time principals in information-flow type systems, in: IEEE Symposium on Security and Privacy, 2004, pp. 179-193.
60. Udzir N.I., Wood A.M., and Jacob J.L. Coordination with multicapabilities. Sci. Comput. Program. 64 2 (2007) 205-222
61. M. Wand, I. Siveroni, Constraint systems for useless variable elimination, in: proceedings of the ACM Symposium on Principles of Programming Languages (POPL), 1999, pp. 291-302.
62. Wood A. Coordination with attributes. COORDINATION'99: Proceedings of the Third International Conference on Coordination Languages and Models (1999), Springer-Verlag 21-36
63. Wyckoff P., McLaughry S., Lehman T., and Ford D. TSpaces. IBM Syst. J. 37 3 (1998) 454-474