A study for access control flow analysis with a proposed job analyzer component based on stack inspection methodology

Proceedings of the 2010 10th International Conference on Intelligent Systems Design and Applications, ISDA'10

Volumn , Issue , 2010, Pages 1442-1447

  Kholidy, Hisham A ^a  

^a UNIVERSITY OF PISA   (Italy)

Author keywords

Access control; Code access security; Component; HIMAN; HIMAN ID; Information flow analysis; Intrusion detection system; Program analysis; Sandboxing; Security; Security properties; Stack inspection; Static analysis

Indexed keywords

CODE ACCESS SECURITY; COMPONENT; HIMAN; HIMAN-ID; INFORMATION FLOW ANALYSIS; INTRUSION DETECTION SYSTEM; PROGRAM ANALYSIS; SANDBOXING; SECURITY; SECURITY PROPERTIES; STACK INSPECTION;

ACCESS CONTROL; COMPUTER CRIME; INSPECTION; INTELLIGENT SYSTEMS; INTRUSION DETECTION; SECURITY SYSTEMS; SYSTEMS ANALYSIS;

STATIC ANALYSIS;

EID: 79851496858     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISDA.2010.5687113     Document Type: Conference Paper

References (15)

1. Pistoia, M. and Erlingsson, Ú, "Programming languages and program analysis for security: a three-year retrospective". SIGPLAN Notice, pp. 1-3, 12 Feb, 2009.
2. Larry Koved, Marco Pistoia, and Aaron Kershenbaum, "Access Rights Analysis for Java", In 17th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA 2002), pages 359-372, Seattle, USA, November 2002, ACM Press.
3. Jerome H. Saltzer and Michael D. Schroeder, "The Protection of Information in Computer Systems", Proceedings of the IEEE, 63(9):1278-1308, Sept, 1975.
4. Vinod Ganapathy, Dave King, Trent Jaeger, and Somesh Jha, "Mining Security-Sensitive Operations in Legacy Code Using Concept Analysis", In 29th International Conference on Software Engineering(ICSE), pp458-467, Minneapolis, MN, USA, May 2007. (Pubitemid 47430680)
5. Gong, L. JavaTM2, "Platform Security Architecture", 2002.
6. Ali E. El-Desoky, Hisham A., Abdulrahman A. Azab, "A Pure Peer-to-Peer Desktop Grid Framework with Efficient Fault Tolerance", IEEE-ICCES 24, Nov. 2007.
7. Abdulrahman A. Azab, Hisham A Kholidy, "An Adaptive Decentralized Scheduling Mechanism for Peer-to-Peer Desktop Grids", ICCES'08 (The 2008 International Conference on Computer Engineering & Systems) 25-27 Nov, 2008
8. D. Volpano, G. Smith, and C. Irvine, "A sound type system for secure flow analysis", Journal of Computer Security, 4(3):167-187, 1996.
9. A. Banerjee and D. A. Naumann, "Using access control for secure information flow in a Java-like language", In IEEE Computer Security Foundations Workshop (CSFW), 2003.
10. Dan S. Wallach, Edward W. Felten, "Understanding Java Stack Inspection", In IEEE Symposium on Security and Privacy, p 2-5, 1998.
11. Abadi, M., Fournet, C, "Access Control Based on Execution History", In Proceedings of the Network and Distributed System Security Symposium Conference (NDSS), pp. 6-7, 2003.
12. T. Jensen, D. Le Métayer, T. Thorn, D. Le, Metayer T. Thorn, "Verification of control flow based security properties", In IEEE Symposium on Security and Privacy, pages(3-5, 11), 1999.
13. Massimo Bartoletti, Pierpaolo Degano, Gianluigi Ferrari, "Static analysis for stack inspection", In Proceedings of International Workshop on Concurrency and Coordination, Electronic Notes in Theoretical Computer Science, pages 2-4, Lipari, Italy, 2001.
14. Alexandre Schulter, Kleber Vieira, Carols Westphal, Carla Westphal, Sekkaki Abderrahim, "Intrusion Detection for Computational Grids", conference of New Technologies, Mobility and Security (NTMS), pages 2-4, 2008.
15. Privileged Operations and their permissions: msdn.microsoft.com/en-us/ library/ff649312.aspx#paght000017-privilegedoperation