A theory of runtime enforcement, with results

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6345 LNCS, Issue , 2010, Pages 87-100

  Ligatti, Jay ^a   Reddy, Srikar ^a  

^a UNIVERSITY OF SOUTH FLORIDA   (United States)

Author keywords

enforceability theory; Security models

Indexed keywords

ENFORCEABILITY THEORY; GENERAL MODEL; MECHANISM MODELING; OPERATIONAL SEMANTICS; RUNTIME ENFORCEMENTS; RUNTIMES; SECURITY MODELING; SIMPLE++;

SEMANTICS;

EID: 78049404569     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-15497-3_6     Document Type: Conference Paper

References (19)

1. Aktug, I., Dam, M., Gurov, D.: Provably correct runtime monitoring. In: Proceedings of the 15th International Symposium on Formal Methods (May 2008)
2. Alpern, B., Schneider, F. B.: Defining liveness. Information Processing Letters 21(4), 181-185 (1985)
3. Bauer, L., Ligatti, J., Walker, D.: Composing expressive runtime security policies. ACM Transactions on Software Engineering and Methodology 18(3), 1-43 (2009)
4. Beauquier, D., Cohen, J., Lanotte, R.: Security policies enforcement using finite edit automata. Electron. Notes Theor. Comput. Sci. 229(3), 19-35 (2009)
5. Dam, M., Jacobs, B., Lundblad, A., Piessens, F.: Security monitor inlining for multithreaded java. In: Proceedings of the European Conference on Object-Oriented Programming (ECOOP) (July 2009)
6. Devriese, D., Piessens, F.: Non-interference through secure multi-execution. In: Proceedings of the IEEE Symposium on Security and Privacy, pp. 109-124 (May 2010)
7. Erlingsson, Ú.: The Inlined Reference Monitor Approach to Security Policy Enforcement. PhD thesis, Cornell University (January 2004)
8. Fong, P. W. L.: Access control by tracking shallow execution history. In: Proceedings of the IEEE Symposium on Security and Privacy (May 2004)
9. Hamlen, K., Morrisett, G., Schneider, F. B.: Computability classes for enforcement mechanisms. ACM Transactions on Progamming Languages and Systems 28(1), 175-205 (2006)
10. Kiczales, G., Hilsdale, E., Hugunin, J., Kersten, M., Palm, J., Griswold, W.: An overview of AspectJ. In: Knudsen, J. L. (ed.) ECOOP 2001. LNCS, vol. 2072, p. 327. Springer, Heidelberg (2001)
11. Kim, M., Kannan, S., Lee, I., Sokolsky, O., Viswantathan, M.: Computational analysis of run-time monitoring-fundamentals of Java-MaC. Run-time Verification (June 2002)
12. Ligatti, J., Bauer, L., Walker, D.: Run-time enforcement of nonsafety policies. ACM Transactions on Information and System Security 12(3), 1-41 (2009)
13. Ligatti, J., Reddy, S.: A theory of runtime enforcement, with results. Technical Report USF-CSE-SS-102809, University of South Florida (June 2010), http://www.cse.usf.edu/~ligatti/papers/mra-tr.pdf
14. Ligatti, J., Rickey, B., Saigal, N.: LoPSiL: A location-based policy-specification language. In: International ICST Conference on Security and Privacy in Mobile Information and Communication Systems (MobiSec) (June 2009)
15. Saltzer, J., Schroeder, M.: The protection of information in computer systems. Proceedings of the IEEE 63(9), 1278-1308 (1975)
16. Schneider, F. B.: Enforceable security policies. ACM Transactions on Information and Systems Security 3(1), 30-50 (2000)
17. Talhi, C., Tawbi, N., Debbabi, M.: Execution monitoring enforcement under memory-limitation constraints. Information and Computation 206 (2-4), 158-184 (2008)
18. Viswanathan, M.: Foundations for the Run-time Analysis of Software Systems. PhD thesis, University of Pennsylvania (2000)
19. Yu, D., Chander, A., Islam, N., Serikov, I.: Javascript instrumentation for browser security. In: Proceedings of the Symposium on Principles of Programming Languages, pp. 237-249 (2007)