Information flow enforcement in monadic libraries

TLDI'11 - Proceedings of the 7th ACM SIGPLAN Workshop on Types in Language Design and Implementation

Volumn , Issue , 2011, Pages 59-71

  Devriese, Dominique ^a   Piessens, Frank ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

Information flow enforcement; Monad transformer; Monads; Parameterised monads

Indexed keywords

CLIENT PROGRAMS; DYNAMIC INFORMATION; FORMAL REASONING; FUNDAMENTAL LIMITATIONS; GENERAL INFORMATION; GENERALISATION; HYBRID TECHNIQUES; IMPERATIVE FEATURES; INFORMATION FLOW POLICIES; INFORMATION FLOWS; MODIFIED INTERFACES; MONAD TRANSFORMER; MONAD TRANSFORMERS; MONADS; PARAMETERISED MONADS; POLICY ENFORCEMENT; SENSITIVE DATAS; STATE VARIABLES; STATIC INFORMATION; STATIC TECHNIQUES; TYPE CLASS;

INFORMATION DISSEMINATION;

APPLICATION PROGRAMMING INTERFACES (API);

EID: 79952121674     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1929553.1929564     Document Type: Conference Paper

References (24)

1. R. Atkey. Parameterised notions of computation. Journal of Functional Programming, 19(3-4):335-376, 2009.
2. T. Austin and C. Flanagan. Efficient purely-dynamic information flow analysis. In PLAS Workshop, pages 113-124. ACM, 2009.
3. K. Crary, A. Kliger, and F. Pfenning. A monadic analysis of information flow security with mutable state. Journal of functional programming, 15(02):249-291, 2005.
4. D. Devriese and F. Piessens. Non-interference through secure multi-execution. In IEEE Symposium on Security and Privacy, 2010.
5. I. Dupree. Ghc ticket 1537 - do notation translation. http://hackage.haskell.org/trac/ghc/ticket/1537, 2007. Fixed in GHC 6.8.3.
6. GHC Team. GHC manual - rebindable syntax and the implicit Prelude import. http://haskell.org/ghc/docs/6.12.2/html/users-guide/syntax-extns. html#rebindable-syntax, 2010.
7. J. Hughes. Generalising monads to arrows. Science of computer programming, 37(1-3):67-111, 2000.
8. O. Kiselyov. Genuine shift/reset in haskell. Mailing list message, December 2007.
9. E. Kmett. Parameterized monads in haskell. The Comonad. Reader, 2007. URL http://comonad.com/reader/2007/parameterized-monads-in-haskell/.
10. J. Launchbury, P. Jones, and L. Simon. Lazy functional state threads. In PLDI, page 35. ACM, 1994.
11. G. Le Guernic. Confidentiality Enforcement Using Dynamic Information Flow Analyses. PhD thesis, Kansas State University, 2007.
12. G. Le Guernic, A. Banerjee, T. Jensen, and D. Schmidt. Automata-based confidentiality monitoring. In ASIAN, pages 75 - 89, 2006.
13. P. Li and S. Zdancewic. Encoding information flow in haskell. In 19th IEEE Computer Security Foundations Workshop, 2006, page 12, 2006.
14. J. Ligatti, L. Bauer, and D. Walker. Edit automata: Enforcement mechanisms for run-time security policies. International Journal of Information Security, 4(1):2-16, 2005. (Pubitemid 40347198)
15. A. Myers. JFlow: Practical mostly-static information flow control. In POPL, pages 228-241. ACM, 1999.
16. F. Pottier and V. Simonet. Information flow inference for ML. TOPLAS, 25(1):117-158, 2003.
17. R. Pucella and J. Tov. Haskell session types with (almost) no class. ACM SIGPLAN Notices, 44(2):25-36, 2009.
18. A. Russo and A. Sabelfeld. Dynamic vs. static flow-sensitive security analysis. In Computer Security Foundations, 2010.
19. A. Russo, K. Claessen, and J. Hughes. A library for light-weight information-flow security in haskell. In Haskell Symposium, pages 13-24. ACM, 2008.
20. A. Sabelfeld and A. Myers. Language-based information-flow security. IEEE Journal on selected areas in communications, 21(1):5-19, 2003.
21. A. Sabelfeld and A. Russo. From dynamic to static and back: Riding the roller coaster of information-flow control research. In Perspectives of System Informatics, 2009.
22. T.-C. Tsai, A. Russo, and J. Hughes. A library for secure multithreaded information flow in Haskell. In CSF, pages 187-202, 2007.
23. D. Volpano and G. Smith. Eliminating covert flows with minimum typings. In CSFW, pages 156-168, 1997.
24. D. Volpano, C. Irvine, and G. Smith. A sound type system for secure flow analysis. Journal of computer security, 4(2/3):167-188, 1996.