PCAL: Language support for proof-carrying authorization systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5789 LNCS, Issue , 2009, Pages 184-199

  Chaudhuri, Avik ^a   Garg, Deepak ^b  

^a UNIVERSITY OF MARYLAND   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL POLICIES; AUTHORIZATION SYSTEMS; BURDEN OF PROOF; COMPILE TIME; RUNTIMES;

LINGUISTICS; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 70350353525     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-04444-1_12     Document Type: Conference Paper

References (18)

1. Abadi, M.: Access control in a core calculus of dependency. Electronic Notes in Theoretical Computer Science 172, 5-31 (2007); Computation, Meaning, and Logic: Articles dedicated to Gordon Plotkin
2. Abadi, M., Burrows, M., Lampson, B., Plotkin, G.: A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems 15(4), 706-734 (1993)
3. Appel, A.W., Felten, E.W.: Proof-carrying authentication. In: ACM Conference on Computer and Communications Security (CCS 2009), pp. 52-62. ACM Press, New York (1999)
4. Avijit, K., Datta, A., Harper, R.: PCML5: A language for ensuring compliance with access control policies (2009); Draft, personal communication
5. Bauer, L.: Access Control for the Web via Proof-Carrying Authorization. PhD thesis, Princeton University (2003)
6. Bauer, L., Garriss, S., McCune, J.M., Reiter, M.K., Rouse, J., Rutenbar, P.: Deviceenabled authorization in the grey system. In: Zhou, J., Lopez, J., Deng, R.H., Bao, F. (eds.) ISC 2005. LNCS, vol. 3650, pp. 431-445. Springer, Heidelberg (2005)
7. Becker, M.Y., Fournet, C., Gordon, A.D.: Design and semantics of a decentralized authorization language. In: IEEE Computer Security Foundations Symposium (CSF 2007), pp. 3-15. IEEE Computer Society Press, Los Alamitos (2007)
8. Bengtson, J., Bhargavan, K., Fournet, C., Gordon, A., Maffeis, S.: Refinement types for secure implementations. In: IEEE Computer Security Foundations Symposium (CSF 2008), pp. 17-32. IEEE, Los Alamitos (2008)
9. Chaudhuri, A., Abadi, M.: Secrecy by typing and file-access control. In: IEEE Computer Security Foundations Workshop (CSFW 2006), pp. 112-123. IEEE, Los Alamitos (2006)
10. Chaudhuri, A., Garg, D.: PCAL: Language support for proof-carrying authorization systems. Technical Report CMU-CS-09-141, Carnegie Mellon University (2009)
11. Chaudhuri, A., Naldurg, P., Rajamani, S.: A type system for data-flow integrity on Windows Vista. In: ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS 2008), pp. 89-100. ACM, New York (2008)
12. DeTreville, J.: Binder, a logic-based security language. In: IEEE Symposium on Security and Privacy (S&P 2002), pp. 105-113. IEEE, Los Alamitos (2002)
13. Flanagan, C.: Hybrid type checking. In: ACM Symposium on Principles of Programming Languages (POPL 2006), pp. 245-256. ACM, New York (2006)
14. Fournet, C., Gordon, A., Maffeis, S.: A type discipline for authorization in distributed systems. In: IEEE Computer Security Foundations Symposium (CSF 2007), pp. 31-48. IEEE, Los Alamitos (2007)
15. Garg, D.: Proof search in an authorization logic. Technical Report CMU-CS-09-121, Carnegie Mellon University (2009)
16. Garg, D., Pfenning, F.: Non-interference in constructive authorization logic. In: IEEE Computer Security Foundations Workshop (CSFW 2006), pp. 283-293. IEEE, Los Alamitos (2006)
17. Garg, D., Pfenning, F.: A proof-carrying file system. Technical Report CMU-CS-09-123, Carnegie Mellon University (2009)
18. Jia, L., Vaughan, J.A., Mazurak, K., Zhao, J., Zarko, L., Schorr, J., Zdancewic, S.: Aura: A programming language for authorization and audit. In: ACM International Conference on Functional Programming (ICFP 2008). ACM, New York (2008)