Flexible in-lined reference monitor certification: Challenges and future directions

PLPV'11 - Proceedings of the 5th ACM Workshop on Programming Languages Meets Program Verification

Volumn , Issue , 2011, Pages 55-60

  Sridhar, Meera ^a   Hamlen, Kevin W ^a  

^a UNIVERSITY OF TEXAS AT DALLAS   (United States)

Author keywords

Aspect oriented programming; In lined reference monitors; Runtime verification; Static verification

Indexed keywords

ASPECT-ORIENTED; CERTIFICATION SYSTEMS; FORMAL VERIFICATIONS; FUTURE DIRECTIONS; IN-LINED REFERENCE MONITORS; LIGHT WEIGHT; POLICY SPECIFICATION; REFERENCE MONITORS; RUNTIME CODE; RUNTIME VERIFICATION; SECURITY ENFORCEMENT MECHANISMS; STATIC VERIFICATION; TRUSTED COMPUTING BASE; UNSOLVED PROBLEMS; UNTRUSTED CODE; WORK-RELATED;

COMPUTER OPERATING SYSTEMS; COMPUTER SYSTEMS PROGRAMMING; DECENTRALIZED CONTROL; FORMAL LOGIC; PROBLEM ORIENTED LANGUAGES;

ASPECT ORIENTED PROGRAMMING;

EID: 79952134548     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1929529.1929537     Document Type: Conference Paper

References (55)

1. I. Aktug and K. Naliuka. ConSpec - a formal language for policy specification. Science of Computer Programming, 74:2-12, 2008.
2. C. Allan, P. Avgustinov, A. S. Christensen, L. Hendren, S. Kuzins, O. Lhoták, O. de Moor, D. Sereni, G. Sittampalam, and J. Tibble. Adding trace matching with free variables to AspectJ. In Proc. ACM Conf. on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), pages 345-364, 2005.
3. B. Alpern and F. B. Schneider. Recognizing safety and liveness. Distributed Computing, 2:117-126, 1986.
4. C. Anderson and S. Drossopoulou. BabyJ: From object based to class based programming via types. In Proc. Workshop on Object-Oriented Developments (WOOD), pages 53-81, 2003.
5. C. Anderson and P. Giannini. Type checking for JavaScript. Electronic Notes in Theoretical Computer Science, 138(2):37-58, 2005. (Pubitemid 41625696)
6. C. Artho, K. Havelund, and A. Biere. High-level data races. In Proc. Int. Workshop on Validation and Verification of Software for Enterprise Information Systems (VVEIS), pages 82-93, 2003.
7. L. Bauer, J. Ligatti, and D. Walker. Composing security policies with Polymer. In Proc. ACM Conf. on Programming Language Design and Implementation (PLDI), pages 305-314, 2005.
8. S. Bensalem and K. Havelund. Dynamic deadlock analysis of multithreaded programs. In Haifa Verification Conf., pages 208-223, 2005.
9. E. Bodden and K. Havelund. Racer: Effective race detection using AspectJ. In Proc. Int. Symp. on Software Testing and Analysis (ISSTA), pages 155-166, 2008.
10. F. Chen and G. Roşu. Java-MOP: A Monitoring Oriented Programming environment for Java. In Proc. Int. Conf. on Tools and Algorithms for the Construction and Analysis of Systems (TACAS), pages 546-550, 2005. (Pubitemid 41282531)
11. A. S. Christensen, A. Møller, and M. I. Schwartzbach. Precise analysis of string expressions. In Proc. Int. Static Analysis Symp. (SAS), pages 1-18, 2003.
12. A. Chudnov and D. A. Naumann. Information flow monitor inlining. In Proc. IEEE Computer Security Foundations Symp. (CSF), 2010.
13. M. Cova, C. Kruegel, and G. Vigna. Detection and analysis of drive-by-download attacks and malicious JavaScript code. In Proc. Int. Conf. on World Wide Web (WWW), pages 281-290, 2010.
14. D. S. Dantas and D. Walker. Harmless advice. In Proc. ACM Symp. on Principles of Programming Languages (POPL), pages 383-396, 2006.
15. D. S. Dantas, D. Walker, G. Washburn, and S. Weirich. AspectML: A polymorphic aspect-oriented functional programming language. ACM Transactions on Programming Languages and Systems, 30(3), 2008.
16. B. W. DeVries, G. Gupta, K. W. Hamlen, S. Moore, and M. Sridhar. ActionScript bytecode verification with co-logic programming. In Proc. ACM Workshop on Programming Languages and Analysis for Security (PLAS), pages 9-15, 2009.
17. K.-G. Doh, H. Kim, and D. A. Schmidt. Abstract parsing: Static analysis of dynamically generated string output using LR-parsing technology. In Proc. Int. Static Analysis Symp. (SAS), pages 256-272, 2009.
18. J. Earley. An efficient context-free parsing algorithm. Communications of the ACM, 26(1):57-61, 1983.
19. ECMA International. ECMAScript language specification, December 1999. ECMA Standard 262, 3rd Edition.
20. M. Egele, P. Wurzinger, C. Kruegel, and E. Kirda. Defending browsers against drive-by downloads: Mitigating heap-spraying code injection attacks. In Proc. Int. Conf. on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA), pages 88-106, 2009.
21. Ú. Erlingsson. The In-lined Reference Monitor Approach to Security Policy Enforcement. PhD thesis, Cornell University, Ithaca, NY, 2004.
22. Ú. Erlingsson and F. B. Schneider. SASI enforcement of security policies: A retrospective. In Proc. New Security Paradigms Workshop (NSPW), 1999.
23. Ú. Erlingsson, M. Abadi, M. Vrable, M. Budiu, and G. C. Necula. XFI: Software guards for system address spaces. In Proc. Symp. on Operating Systems Design and Implementation (OSDI), pages 75-88, 2006.
24. D. Evans and A. Twynman. Flexible policy-directed code safety. In Proc. IEEE Symp. on Security and Privacy (S&P), pages 32-45, 1999.
25. A. Guha, S. Krishnamurthi, and T. Jim. Using static analysis for Ajax intrusion detection. In Proc. Int. Conf. on World Wide Web (WWW), pages 561-570, 2009.
26. K. W. Hamlen and M. Jones. Aspect-oriented in-lined reference monitors. In Proc. ACM Workshop on Programming Languages and Analysis for Security (PLAS), pages 11-20, 2008.
27. K. W. Hamlen, G. Morrisett, and F. B. Schneider. Computability classes for enforcement mechanisms. ACM Transactions on Programming Languages and Systems, 28(1):175-205, 2006. (Pubitemid 43943421)
28. K. W. Hamlen, G. Morrisett, and F. B. Schneider. Certified in-lined reference monitoring on .NET. In Proc. ACM Workshop on Programming Languages and Analysis for Security (PLAS), pages 7-16, 2006. (Pubitemid 44059942)
29. K. Havelund. Using runtime analysis to guide model checking of Java programs. In Proc. Int. SPIN Workshop on SPIN Model Checking and Software Verification, pages 245-264, 2000.
30. G. Holzmann. The SPIN Model Checker: Primer and Reference Manual. Addison-Wesley Professional, 2003.
31. D. Jang and K.-M. Choe. Points-to analysis for JavaScript. In Proc. ACM Symp. on Applied Computing (SAC), pages 1930-1937, 2009.
32. S. H. Jensen, A. Møller, and P. Thiemann. Type analysis for JavaScript. In Proc. Int. Static Analysis Symp. (SAS), pages 238-255, 2009.
33. L. Jia, J. Zhao, V. Sjöberg, and S. Weirich. Dependent types and program equivalence. In Proc. ACM Symp. on Principles of Programming Languages (POPL), pages 275-286, 2010.
34. M. Jones and K. W. Hamlen. Disambiguating aspect-oriented policies. In Proc. Int. Conf. on Aspect-Oriented Software Development (AOSD), pages 193-204, 2010.
35. G. Kiczales, J. Lamping, A. Medhdhekar, C. Maeda, C. Lopes, J.-M. Loingtier, and J. Irwin. Aspect-oriented programming. In Proc. European Conf. on Object-Oriented Programming (ECOOP), pages 220-242, 1997. (Pubitemid 127083932)
36. M. Kim, S. Kannan, I. Lee, and O. Sokolsky. Java-MaC: A run-time assurance tool for Java programs. In Proc. Int. Workshop on Runtime Verification (RV), 2001.
37. V. Kiriansky, D. Bruening, and S. P. Amarasinghe. Secure execution via program shepherding. In Proc. USENIX Security Symp., pages 191-206, 2002.
38. Z. Li and X. Wang. FIRM: Capability-based inline mediation of Flash behaviors. In Proc. Annual Computer Security Applications Conf. (ACSAC), 2010. to appear.
39. J. Ligatti, L. Bauer, and D. Walker. Enforcing non-safety security policies with program monitors. In Proc. European Symp. on Research in Computer Security (ESORICS), pages 355-373, 2005.
40. S. McCamant and G. Morrisett. Evaluating SFI for a CISC architecture. In Proc. USENIX Security Symp., 2006.
41. R. Milner. Communicating and Mobile Systems: The Pi-Calculus. Cambridge University Press, 1999.
42. Y. Minamide. Static approximation of dynamically generated web pages. In Proc. Int. Conf. on World Wide Web (WWW), pages 432-441, 2005.
43. G. C. Necula. Proof-Carrying Code. In Proc. ACM Symp. on Principles of Programming Languages (POPL), pages 106-119, 1997.
44. G. Richards, S. Lebresne, B. Burg, and J. Vitek. An analysis of the dynamic behavior of JavaScript programs. In Proc. ACM Conf. on Programming Language Design and Implementation (PLDI), pages 1-12, 2010.
45. P. Rondon, M. Kawaguchi, and R. Jhala. Low-level liquid types. In Proc. ACM Symp. on Principles of Programming Languages (POPL), pages 131-144, 2010.
46. F. B. Schneider. Enforceable security policies. ACM Transactions on Information and Systems Security, 3(1):30-50, 2000.
47. V. Shah and F. Hill. An aspect-oriented security framework. In Proc. DARPA Information Survivability Conf. and Exposition, volume 2, pages 143-145, 2003.
48. M. Sridhar and K. W. Hamlen. ActionScript in-lined reference monitoring in Prolog. In Proc. Int. Symp. on Practical Aspects of Declarative Languages (PADL), pages 149-151, 2010.
49. M. Sridhar and K. W. Hamlen. Model-checking in-lined reference monitors. In Proc. Int. Conf. on Verification, Model-Checking and Abstract Interpretation (VMCAI), pages 312-327, 2010.
50. V. Stolz and E. Bodden. Temporal assertions using AspectJ. Electronic Notes in Theoretical Computer Science, 144(4):109-124, 2006. (Pubitemid 43728185)
51. D. Tarditi, G. Morrisett, P. Cheng, C. Stone, R. Harper, and P. Lee. TIL: A type-directed optimizing compiler for ML. In Proc. ACM Conf. on Programming Language Design and Implementation (PLDI), pages 181-192, 1996. (Pubitemid 126669337)
52. P. Thiemann. Towards a type system for analyzing JavaScript programs. In Proc. European Symp. on Programming (ESOP), pages 408-422, 2005. (Pubitemid 41274072)
53. P. Thiemann. Grammar-based analysis of string expressions. In Proc. ACM Int. Workshop on Types in Languages Design and Implementation (TLDI), pages 59-70, 2005. (Pubitemid 41810719)
54. J. Viega, J. Bloch, and P. Chandra. Applying aspect-oriented programming to security. Cutter IT Journal, 14(2), 2001.
55. B. Yee, D. Sehr, G. Dardyk, J. B. Chen, R. Muth, T. Ormandy, S. Okasaka, N. Narula, and N. Fullagar. Native Client: A sandbox for portable, untrusted x86 native code. In Proc. IEEE Symp. on Security and Privacy (S&P), pages 79-93, 2009.