Verifying information flow control over unbounded processes

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5850 LNCS, Issue , 2009, Pages 773-789

  Harris, William R ^a   Kidd, Nicholas A ^a   Chaki, Sagar ^b   Jha, Somesh ^a   Reps, Thomas ^a,c  

^a UNIVERSITY OF WISCONSIN   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

^c GRAMMATECH INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATIC TECHNIQUE; COMMUNICATION CHANNEL; DECENTRALIZED INFORMATION FLOW CONTROL; INFORMATION FLOW CONTROL; MODEL CHECKER; REAL-WORLD; REFERENCE MONITORS;

FLOW CONTROL; FORMAL METHODS; MODEL CHECKING;

PROCESS CONTROL;

EID: 70649112133     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-05089-3_49     Document Type: Conference Paper

References (21)

1. Efstathopoulos, P., Krohn, M., VanDeBogart, S., Frey, C., Ziegler, D., Kohler, E., Mazières, D., Kaashoek, F., Morris, R.: Labels and event processes in the Asbestos operating system. SIGOPS Oper. Syst. Rev. 39(5), 17-30 (2005)
2. Zeldovich, N., Boyd-Wickizer, S., Kohler, E., Mazières, D.: Making information flow explicit in HiStar. In: OSDI (2006)
3. Krohn, M., Yip, A., Brodsky, M., Cliffer, N., Kaashoek, M.F., Kohler, E., Morris, R.: Information flow control for standard os abstractions. In: SOSP (2007)
4. Conover, M.: Analysis of the Windows Vista Security Model. Technical report, Symantec Corporation (2008)
5. Chaki, S., Clarke, E., Groce, A., Ouaknine, J., Strichman, O., Yorav, K.: Efficient verification of sequential and concurrent C programs. Form. Methods Syst. Des. 25(2-3), 129-166 (2004)
6. Kidd, N.A., Reps, T.W., Dolby, J., Vaziri, M.: Finding concurrency-related bugs using random isolation. In: Jones, N.D., Müller-Olm, M. (eds.) VMCAI 2009. LNCS, vol. 5403, pp. 198-213. Springer, Heidelberg (2009)
7. Apache: Apache, http://www.apache.org
8. ClamAV: ClamAV, http://www.clamav.net
9. OpenVPN: OpenVPN, http://www.openvpn.net
10. Chaudhuri, A., Naldurg, P., Rajamani, S.K., Ramalingam, G., Velaga, L.: EON: Modeling and analyzing dynamic access control systems with logic programs. In: CCS (2008)
11. Krohn, M., Tromer, E.: Non-interference for a practical DIFC-based operating system. In: IEEE Symposium on Security and Privacy (2009)
12. Sagiv, M., Reps, T., Wilhelm, R.: Parametric shape analysis via 3-valued logic. ACM Trans. Program. Lang. Syst. 24(3), 217-298 (2002)
13. Harris, W.R., Kidd, N.A., Chaki, S., Jha, S., Reps, T.: Verifying information flow control over unbounded processes. Technical Report UW-CS-TR-1655, Univ. of Wisc (May 2009)
14. Necula, G., McPeak, S., Rahul, S., Weimer, W.: CIL: Intermediate language and tools for analysis and transformation of C programs (2002)
15. MoinMoin: The MoinMoin wiki engine (December 2006), http://moinmoin. wikiwikiweb.de
16. Vandebogart, S., Efstathopoulos, P., Kohler, E., Krohn, M., Frey, C., Ziegler, D., Kaashoek, F., Morris, R., Mazières, D.: Labels and Event Processes in the Asbestos Operating System. ACM Trans. Comput. Syst. 25(4), 11 (2007)
17. Yahav, E.: Verifying safety properties of concurrent java programs using 3-valued logic. In: POPL (2001)
18. Denning, D.E., Denning, P.J.: Certification of programs for secure information flow. Commun. ACM 20(7), 504-513 (1977)
19. Myers, A.C.: JFlow: practical mostly-static information flow control. In: POPL (1999)
20. Guttman, J.D., Herzog, A.L., Ramsdell, J.D., Skorupka, C.W.: Verifying Information-Flow Goals in Security-Enhanced Linux. Journal of Computer Security (2005)
21. Zhang, X., Edwards, A., Jaeger, T.: Using CQUAL for static analysis of authorization hook placement. In: USENIX Security Symposium, pp. 33-48 (2002)