Access Control based on Execution History

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2003

Volumn , Issue , 2003, Pages

  Abadi, Martín ^a   Fournet, Cédric ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); COMPUTER SOFTWARE; HIGH LEVEL LANGUAGES; NETWORK SECURITY; WEB SERVICES;

APPLETS; COMMON LANGUAGE RUNTIME; DISTRIBUTED APPLICATIONS; EXECUTION HISTORY; JAVA VIRTUAL MACHINES; PROGRAMMABLE NETWORK; RUNTIMES; SIMPLE++; SOFTWARE-SYSTEMS; WEB SERVICES NETWORKS;

ACCESS CONTROL;

EID: 84890865854     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. E. Fiuczynski, D. Becker, C. Chambers, and S. J. Eggers. Extensibility, safety and performance in the SPIN operating system. In Proceedings of the 15th ACM Symposium on Operating System Principles, pages 267–284, 1995.
2. D. Box. Essential .NET Volume I: The Common Language Runtime. Addison Wesley, 2002. To appear.
3. D. F. C. Brewer and M. J. Nash. The chinese wall security policy. In Proceedings of the 1989 IEEE Symposium on Security and Privacy, pages 206–214, 1989.
4. D. Denning. Cryptography and Data Security. Addison Wesley, 1982.
5. ECMA. Standard ECMA-335: Common Language Infrastructure, Dec. 2001. Available from http://msdn.microsoft.com/net/ecma/.
6. G. Edjlali, A. Acharya, and V. Chaudhary. History-based access control for mobile code. In ACM Conference on Computer and Communications Security, pages 38–48, 1998.
7. Ú. Erlingsson and F. Schneider. IRM enforcement of Java stack inspection. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, pages 246–255. IEEE Computer Society Press, 2000.
8. C. Fournet and A. D. Gordon. Stack inspection: Theory and variants. In 29th ACM Symposium on Principles of Programming Languages (POPL’02), pages 307–318, Jan. 2002.
9. TM 2 Platform Security. Addison Wesley, 1999.
10. N. Hardy. The confused deputy. ACM Operating Systems Review, 22(4):36–38, Oct. 1988. Available from http://www.cis.upenn.edu/~KeyKOS/ConfusedDeputy.html.
11. T. Jensen, D. L. Metayer, and T. Thorn. Verification of control flow based security properties. In Proceedings of the 1999 IEEE Symposium on Security and Privacy, pages 89–103. IEEE Computer Society Press, 1999.
12. S. Lange, B. LaMacchia, M. Lyons, R. Martin, B. Pratt, and G. Singleton. .NET Framework Security. Addison Wesley, 2002.
13. TM Virtual Machine Specification. Addison Wesley, 1997.
14. A. C. Myers. JFlow: Practical, mostly-static information flow control. In 26th ACM Symposium on Principles of Programming Languages (POPL’99), pages 228–241, 1999.
15. F. Pottier, C. Skalka, and S. Smith. A systematic approach to access control. In Programming Languages and Systems (ESOP 2001), volume 2028 of LNCS, pages 30–45. Springer, 2001.
16. J. H. Saltzer. Protection and the control of information sharing in multics. Communications of the ACM, 17(7), July 1974.
17. F. B. Schneider. Enforceable security policies. ACM Transactions on Information and System Security, 3(1): 30–50, Feb. 2000.
18. M. D. Schroeder and J. H. Saltzer. A hardware architecture for implementing protection rings. Communications of the ACM, 15(3):157– 170, 1972.
19. D. A. Solomon and M. E. Russinovich. Inside Microsoft Windows 2000. Microsoft Press, third edition, 2000.
20. D. Stutz. The Microsoft shared source CLI implementation. Mar. 2002. Available from http://msdn.microsoft.com/library/enus/Dndotnet/html/mssharsourcecli.asp.
21. D. S. Wallach, A. W. Appel, and E. W. Felten. SAFKASI: A security mechanism for language-based systems. ACM Transactions on Software Engineering and Methodology, 9(4):341–378, 2000.