Enforcing IRM security policies: Two case studies

2009 IEEE International Conference on Intelligence and Security Informatics, ISI 2009

Volumn , Issue , 2009, Pages 214-216

  Jones, Micah ^a   Hamlen, Kevin W ^a  

^a UNIVERSITY OF TEXAS AT DALLAS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION SECURITY; APPLICATION-SPECIFIC; DECLARATIVE LANGUAGES; JAVA APPLICATIONS; REFERENCE MONITORS; SECURITY POLICY; SOURCE CODES;

INTERSYMBOL INTERFERENCE; LINGUISTICS; MARKUP LANGUAGES; RESEARCH; SECURITY SYSTEMS; XML;

JAVA PROGRAMMING LANGUAGE;

EID: 70350077658     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISI.2009.5137306     Document Type: Conference Paper

References (15)

1. I. Aktug and K. Naliuka. ConSpec: A formal language for policy specification. In Proc. of the 1st Int. Workshop on Run Time Enforcement for Mobile and Distributed Systems (REM'07), pages 45-58, 2007.
2. I. Aktug, M. Dam, and D. Gurov. Provably correct runtime monitoring. In Proc. of the Int. Sym. on Formal Methods (FM), 2008.
3. L. Bauer, J. Ligatti, and D. Walker. Composing security policies with Polymer. In Proc. of the ACM Conf. on Prog. Lang. Design and Implementation (PLDI), pages 305-314, 2005.
4. F. Chen and G. Roşu. Java-MOP: A Monitoring Oriented Programming environment for Java. In Proc. of the 11th Int. Conf. on Tools and Algorithms for the Construction and Analysis of Systems (TACAS), pages 546-550, 2005.
5. F. Dietz and T. Stich. Columba (v1.4). www.columbamail.org.
6. Ú. Erlingsson and F. B. Schneider. IRM Enforcement of Java Stack Inspection. In Proc. of the IEEE Symp. on Security and Privacy, 2000.
7. Ú. Erlingsson and F. B. Schneider. SASI enforcement of security policies: A retrospective. In Proc. of the New Security Paradigms Workshop (NSPW), pages 87-95, 1999.
8. K. W. Hamlen and M. Jones. Aspect-Oriented In-lined Reference Monitors. In Proc. of the 3rd ACM Workshop on Prog. Lang. and Analysis for Security (PLAS), 2008.
9. K. W. Hamlen, G. Morrisett, and F. B. Schneider. Computability classes for enforcement mechanisms. ACM Trans. On Prog. Lang. and Systems (TOPLAS), 28(1):175-205, 2006.
10. K. W. Hamlen, G. Morrisett, and F. B. Schneider. Certified in-lined reference monitoring on .NET. In Proc. of the 1st ACM Workshop on Prog. Lang. and Analysis for Security (PLAS), pages 7-15, 2006.
11. G. Kiczales, J. Lamping, A. Medhdhekar, C. Maeda, C. Lopes, J.M. Loingtier, and J. Irwin. Aspect-Oriented Programming. In Proc. of the 11th European Conf. on Object-Oriented Prog. (ECOOP), volume 1241, pages 220-242, 1997.
12. G. Kiczales, E. Hilsdale, J. Hugunin, M. Kersten, J. Palm, and W. G. Griswold. An overview of AspectJ. In Proc. of the 15th European Conf. on Object-Oriented Prog. (ECOOP), volume 2072, pages 327-355, 2001.
13. L. Lamport. Proving the Correctness of Multiprocess Programs. IEEE Trans. on Software Engineering (TSE), 3(2):125-143, 1977.
14. Y. J. Leist and S. Pingel. XNap (v2.5r3). xnap.sourceforge.net.
15. F. B. Schneider. Enforceable security policies. ACM Trans. on Info. and System Security (TISSEC), 3(1):30-50, 2000.