AuraConf: A unified approach to authorization and confidentiality

TLDI'11 - Proceedings of the 7th ACM SIGPLAN Workshop on Types in Language Design and Implementation

Volumn , Issue , 2011, Pages 45-58

  Vaughan, Jeffrey A ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Cryptography; Dependent types; Information flow

Indexed keywords

ACCESS CONTROL MECHANISM; DEPENDENT TYPES; FORMAL SECURITY; INFORMATION FLOW; PRIVATE KEY; PROGRAMMING LANGUAGE; TYPE SYSTEMS; UNIFIED APPROACH;

CRYPTOGRAPHY; JAVA PROGRAMMING LANGUAGE;

ACCESS CONTROL;

EID: 79952136840     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1929553.1929563     Document Type: Conference Paper

References (40)

1. M. Abadi. Access control in a core calculus of dependency. In Proceedings of the 11th ACM SIGPLAN International Conference on Functional Programming, ICFP 2006, Portland, Oregon, USA, September 16-21, 2006, pp. 263-273. ACM, 2006.
2. M. Abadi, P. Rogaway. Reconciling two views of cryptography (the computational soundness of formal encryption). In Journal of Cryp-tology, 15(2):103-127, 2002.
3. A. Askarov, D. Hedin, A. Sabelfeld. Cryptographically-masked flows. In SAS '06, LNCS. Seoul, Korea, 2006.
4. A. Askarov, S. Hunt, A. Sabelfeld, D. Sands. Termination-insensitive noninterference leaks more than just a bit. In ESORICS '08, pp. 333-348. 2008.
5. A. Askarov, A. Sabelfeld. Gradual release: Unifying declassification, encryption and key release policies. In SP '07: Proceedings of the 2007 IEEE Symposium on Security and Privacy, pp. 207-221. IEEE Computer Society, Washington, DC, USA, 2007. (Pubitemid 47432528)
6. M. Backes, B. Pfitzmann. Relating symbolic and cryptographic secrecy. In IEEE Trans. Dependable Secur. Comput., 2(2):109-123, 2005. (Pubitemid 41259860)
7. M. Backes, B. Pfitzmann, M. Waidner. A composable cryptographic library with nested operations. In CCS '03: Proceedings of the 10th ACM Conference on Computer and Communications security, pp. 220-230. ACM Press, Washington D.C., USA, 2003. (Pubitemid 40673804)
8. G. Barthe, B. Grégoire, S. Zanella Béguelin. Formal certification of code-based cryptographic proofs. In POPL '09: Proceedings of the 36th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pp. 90-101. ACM, New York, NY, USA, 2009.
9. L. Bauer, S. Garriss, M. K. Reiter. Distributed proving in access-control systems. In Proceedings of the 2005 IEEE Symposium on Security & Privacy, pp. 81-95. 2005. (Pubitemid 41543648)
10. N. Benton, P. Buchlovsky. Semantics of an effect analysis for exceptions. In Proceedings of the Third ACM SIGPLAN Workshop on Types in Language Design and Implementation (TLDI '07). ACM, Nice, France, 2007.
11. M. Blume, U. A. Acar, W. Chae. Exception handlers as extensible cases. In Proceedings of the Sixth ASIAN Symposium on Programming Languages and Systems (APLAS 2008). Bangalore, India, 2008. To appear.
12. H. B. Curry, R. Feys, W. Craig. Combinatory Logic, vol. 1. North-Holland, Amsterdam, 1958.
13. D. Dolev, A. Yao. On the security of public key protocols. In IEEE Transactions on Information Theory, 2(29), 1983.
14. C. Fournet, A. D. Gordon, S. Maffeis. A type discipline for authorization in distributed systems. In Proc. of the 20th IEEE Computer Security Foundations Symposium. 2007.
15. C. Fournet, T. Rezk. Cryptographically sound implementations for typed information-flow security. In POPL '08, pp. 323-335. 2008.
16. C. Gentry. Fully homomorphic encryption using ideal lattices. In STOC '09. 2009.
17. R. Goldblatt. Mathematical modal logic: a view of its evolution. In J. of Applied Logic, 1(5-6):309-392, 2003. (Pubitemid 41155185)
18. N. Heintze, J. G. Riecke. The SLam calculus: programming with secrecy and integrity. In POPL '98, pp. 365-377. ACM Press, New York, NY, 1998.
19. W. A. Howard. The formulae-as-types notion of construction. In J. P. Seldin, J. R. Hindly, eds., To H. B. Curry: Essays on Combinatory Logic, Lambda-Calculus, and Formalism, pp. 479-490. Academic Press, New York, 1980.
20. L. Jia, J. A. Vaughan, K. Mazurak, J. Zhao, L. Zarko, J. Schorr, S. Zdancewic. Aura: A programming language for authorization and audit. In ICFP '08, pp. 27-38. 2008. Extended version U. Penn. Tech. Rep. MS-CIS-08-10.
21. L. Jia, D. Walker. Modal proofs as distributed programs (extended abstract). In ESOP '04. 2004. Full version Princeton Tech. Rep. TR-671-03.
22. L. Jia, S. Zdancewic. Encoding information flow in aura. In PLAS '09. 2009.
23. P. Laud, V. Vene. A type system for computationally secure information flow. In FCT '05, pp. 365-377. Lübeck, Germany, 2005. (Pubitemid 41449464)
24. P. Li, S. Zdancewic. Encoding information flow in haskell. In CSFW '06. 2006.
25. J. Liu, M. D. George, K. Vikram, X. Qi, L. Waye, A. C. Myers. Fabric: a platform for secure distributed computation and storage. In SOSP '09: Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles, pp. 321-334. ACM, New York, NY, USA, 2009.
26. J. M. Lucassen, D. K. Gifford. Polymorphic effect systems. In POPL '88. 1988.
27. T. Murphy, VII. Modal Types for Mobile Code. Ph.D. thesis, CMU, 2008.
28. T. Murphy, VII, K. Crary, R. Harper, F. Pfenning. A symmetric modal lambda calculus for distributed computing. In LICS '04. IEEE Press, 2004.
29. A. Myers, B. Liskov. Protecting privacy using the decentralized label model. In ACM Trans. on Software Engineering and Methodology, 9(4):410-442, 2000.
30. F. Pfenning, R. Davies. A judgmental reconstruction of modal logic. In Mathematical. Structures in Comp. Sci., 11(4):511-540, 2001. (Pubitemid 33303507)
31. D. K. Rappe. Homomorphic Cryptosystems and Their Applications. Ph.D. thesis, University of Dortmund, Germany, 2004.
32. A. Sabelfeld, A. C. Myers. Language-based information-flow security. In IEEE Journal on Selected Areas in Communications, 21(1):5-19, 2003.
33. G. Smith, R. Alpízar. Secure information flow with random assignment and encryption. In FSME'06, pp. 33-43. Alexandria, Virgina, USA, 2006.
34. E. Sumii, B. C. Pierce. A bisimulation for dynamic sealing. In POPL '04. 2004.
35. N. Swamy, J. Chen, R. Chugh. Enforcing stateful authorization and information flow policies in Fine. In ESOP '10. 2010.
36. J.-P. Talpin, P. Jouvelot. The type and effect discipline. In LICS '92. 1992.
37. J. A. Vaughan. Aura: Programming with Authorization and Audit. Ph.D. thesis, University of Pennsylvania, Philadelphia, PA, USA, 2009.
38. J. A. Vaughan, L. Jia, K. Mazurak, S. Zdancewic. Evidence-based audit. In CSF '08, pp. 177-191. 2008. Extended version U. Penn. Tech. Rep. MS-CIS-08-09.
39. J. A. Vaughan, S. Zdancewic. A cryptographic decentralized label model. In IEEE Security and Privacy, pp. 192-206. Berkeley, California, 2007. (Pubitemid 47432527)
40. D. Volpano, G. Smith, C. Irvine. A sound type system for secure flow analysis. In Journal of Computer Security, 4(3):167-187, 1996.